From fbb744dd43e92560027ad480ce9c88d24d0b8aa5 Mon Sep 17 00:00:00 2001
From: Daniel Rudolf <github.com@daniel-rudolf.de>
Date: Thu, 1 Oct 2015 22:42:23 +0200
Subject: [PATCH] Deny access to config, content, content-sample, lib and
 vendor dirs

Send 404 Not Found instead of 403 Forbidden
---
 .htaccess | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.htaccess b/.htaccess
index b12e916..389bb6d 100644
--- a/.htaccess
+++ b/.htaccess
@@ -5,6 +5,7 @@
     RewriteCond %{REQUEST_FILENAME} !-f
     RewriteCond %{REQUEST_FILENAME} !-d
     RewriteRule ^(.*)$ index.php?$1 [L,QSA]
+    RewriteRule ^(config|content|content-sample|lib|vendor)/.* - [R=404,L]
 
     <IfModule mod_env.c>
         SetEnv PICO_URL_REWRITING 1