[Feature request] Security of _data folder about gitify HOT 8 CLOSED

Also, the same can be applied to the .gitify file

from gitify.

# Block access to dotfiles and folder people have no need to touch
RewriteRule ^(\.|core|_data) /index.php?q=404 [L]

from gitify.

The _data directory is also configurable (and I guess in the wiki we can encourage changing it from the default), and there are similar ways of blocking access to a folder or dotfiles on nginx.

from gitify.

and rule for nginx:

location /core {
    deny all;
}
location /_data {
    deny all;
}

from gitify.

thanks @alroniks :D

from gitify.

Ah that could work ^.^

from gitify.

If there's still things to discuss here, please feel free to reopen :)

from gitify.

We also always make our data folder called /.gitify-data/ so its hidden from the regular file system

from gitify.