From b09e199a45438d1cc57449f4f5a721bc9d30006a Mon Sep 17 00:00:00 2001
From: Marc Delisle <marc@infomarc.info>
Date: Wed, 27 Sep 2006 20:14:01 +0000
Subject: [PATCH] correct syntax for blocking access to libraries

---
 ChangeLog           | 4 ++++
 libraries/.htaccess | 5 ++---
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index c00e89a24..f02ff5a40 100755
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,10 @@ phpMyAdmin - ChangeLog
 $Id$
 $Source$
 
+2006-09-27 Marc Delisle  <lem9@users.sourceforge.net>
+    * libraries/.htaccess: remove potential vulnerability (allow from none),
+      thanks to Michael Heimpold
+
 2006-09-23 Marc Delisle  <lem9@users.sourceforge.net>
     * libraries/common.lib.php: bug #1519859, avoid overflow on 64-bit machines
 
diff --git a/libraries/.htaccess b/libraries/.htaccess
index 47f32f26b..56baee608 100644
--- a/libraries/.htaccess
+++ b/libraries/.htaccess
@@ -1,4 +1,3 @@
 # This folder does not require access over HTTP
-Order deny,allow
-Deny from all
-Allow from none
+# (the following directive denies access by default)
+Order allow,deny