#5870 Block web requests to silverstripe-cache directory via htaccess RedirectMatch rule or web.config hiddenSegments functionality if using IIS 7.x (from r110241)

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/phpinstaller/trunk@112417 467b73ca-7a2a-4603-9d3b-597d59a354a9

.htaccess

@@ -13,6 +13,10 @@
 ErrorDocument 404 /assets/error-404.html
 ErrorDocument 500 /assets/error-500.html
 
+<IfModule mod_alias.c>
+	RedirectMatch 403 /silverstripe-cache(/|$)
+</IfModule>
+
 <IfModule mod_rewrite.c>
 	RewriteEngine On
 	RewriteCond %{REQUEST_URI} ^(.*)$

install.php

@@ -1122,6 +1122,10 @@ HTML;
 ErrorDocument 404 /assets/error-404.html
 ErrorDocument 500 /assets/error-500.html
 
+<IfModule mod_alias.c>
+	RedirectMatch 403 /silverstripe-cache(/|$)
+</IfModule>
+
 <IfModule mod_rewrite.c>
 	RewriteEngine On
 	$baseClause
@@ -1156,6 +1160,13 @@ TEXT;
 <?xml version="1.0" encoding="utf-8"?>
 <configuration>
 	<system.webServer>
+		<security>
+			<requestFiltering>
+				<hiddenSegments applyToWebDAV="false">
+					<add segment="silverstripe-cache" />
+				</hiddenSegments>
+			</requestFiltering>
+		</security>
 		<rewrite>
 			<rules>
 				<rule name="SilverStripe Clean URLs" stopProcessing="true">