interfasys
Verified User
Just like .htaccess files, .user.ini files need to be protected so that they can't be read through the browser.
This needs to be added somewhere when PHP-FPM is turned on in CB.
This needs to be added somewhere when PHP-FPM is turned on in CB.
Code:
#
# The following lines prevent ..user.ini files from being
# viewed by Web clients.
#
<Files ".user.ini">
Require all denied
</Files>