From 45031fb4ad62ce24623b35c123b35b555e341346 Mon Sep 17 00:00:00 2001
From: Jacek Pyziak <jacek.pyziak@project-pro.pl>
Date: Sat, 17 Jan 2026 21:37:55 +0100
Subject: [PATCH] =?UTF-8?q?Dodanie=20pliku=20.htaccess=20z=20konfiguracj?=
 =?UTF-8?q?=C4=85=20zabezpiecze=C5=84=20i=20blokowaniem=20dost=C4=99pu=20d?=
 =?UTF-8?q?o=20plik=C3=B3w?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 upload/.htaccess | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 upload/.htaccess

diff --git a/upload/.htaccess b/upload/.htaccess
new file mode 100644
index 0000000..f43481b
--- /dev/null
+++ b/upload/.htaccess
@@ -0,0 +1,20 @@
+# Wyłącz listowanie
+Options -Indexes
+
+# Domyślnie blokujemy wszystko…
+Require all denied
+
+# …a dopiero potem pozwalamy na pliki statyczne
+<FilesMatch "\.(css|js|map|mjs|png|jpe?g|gif|svgz?|webp|ico|woff2?|woff|ttf|eot|pdf)$">
+    Require all granted
+</FilesMatch>
+
+# Twardo blokuj cokolwiek, co mogłoby się wykonać
+<FilesMatch "\.(php|phtml|php[0-9]?|phar|pht|cgi|pl|py|sh)$">
+    Require all denied
+</FilesMatch>
+
+# Nie serwuj plików ukrytych (.env itp.)
+<FilesMatch "^\.(.*)$">
+    Require all denied
+</FilesMatch>
\ No newline at end of file