From e3975262cdd219f5a921a3e2a8db157d881d8677 Mon Sep 17 00:00:00 2001
From: Jacek Pyziak <jacek.pyziak@project-pro.pl>
Date: Sat, 17 Jan 2026 21:33:58 +0100
Subject: [PATCH] =?UTF-8?q?Dodanie=20pliku=20.htaccess=20z=20regu=C5=82ami?=
 =?UTF-8?q?=20bezpiecze=C5=84stwa=20dla=20blokowania=20dost=C4=99pu=20do?=
 =?UTF-8?q?=20plik=C3=B3w?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 upload/.htaccess | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 upload/.htaccess

diff --git a/upload/.htaccess b/upload/.htaccess
new file mode 100644
index 0000000..f43481b
--- /dev/null
+++ b/upload/.htaccess
@@ -0,0 +1,20 @@
+# Wyłącz listowanie
+Options -Indexes
+
+# Domyślnie blokujemy wszystko…
+Require all denied
+
+# …a dopiero potem pozwalamy na pliki statyczne
+<FilesMatch "\.(css|js|map|mjs|png|jpe?g|gif|svgz?|webp|ico|woff2?|woff|ttf|eot|pdf)$">
+    Require all granted
+</FilesMatch>
+
+# Twardo blokuj cokolwiek, co mogłoby się wykonać
+<FilesMatch "\.(php|phtml|php[0-9]?|phar|pht|cgi|pl|py|sh)$">
+    Require all denied
+</FilesMatch>
+
+# Nie serwuj plików ukrytych (.env itp.)
+<FilesMatch "^\.(.*)$">
+    Require all denied
+</FilesMatch>
\ No newline at end of file