From 7433735a70d30eb36fbc243821996066a914e885 Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Mon, 6 Jun 2022 11:28:09 +0100
Subject: [PATCH] Prevent access to setup-config.php

---
 docker/htaccess | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docker/htaccess b/docker/htaccess
index c4c9f224..544391d0 100644
--- a/docker/htaccess
+++ b/docker/htaccess
@@ -17,6 +17,9 @@ RewriteCond %{HTTP_HOST}   ^ventitre\.noblogs\.org [NC]
 RewriteRule ^/?(.*)         http://www.ventitre.org/$1 [L,R=301,NE]
 ####
 
+# Prevent access to site setup page
+RewriteRule ^wp-admin/setup-config\.php - [F,END]
+
 # uploaded files
 RewriteRule ^files/(.+) wp-includes/ms-files.php?file=$1 [L]
 RewriteCond %{HTTP_X_FORWARDED_PROTO} https [NC]
-- 
GitLab