From aa07a0edd87f0bf88ec259c500d5355046686d9f Mon Sep 17 00:00:00 2001
From: colymba <thierry@colymba.com>
Date: Sat, 20 Apr 2013 10:31:47 +0300
Subject: [PATCH] BUGFIX #34 Only block root vendor folder

Use RewriteRule instead to take in account any subfolder via RewriteBase. Deny ss-cache and composer via RewriteRule too.

Move to RewriteRules
---
 .htaccess | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/.htaccess b/.htaccess
index e4d313a..683ba0b 100644
--- a/.htaccess
+++ b/.htaccess
@@ -20,15 +20,13 @@
 ErrorDocument 404 /assets/error-404.html
 ErrorDocument 500 /assets/error-500.html
 
-<IfModule mod_alias.c>
-	RedirectMatch 403 /silverstripe-cache(/|$)
-	RedirectMatch 403 /vendor(/|$)
-	RedirectMatch 403 /composer\.(json|lock)
-</IfModule>
-
 <IfModule mod_rewrite.c>
 	SetEnv HTTP_MOD_REWRITE On
-	RewriteEngine On
+	RewriteEngine On	
+
+	RewriteRule ^vendor(/|$) - [F,L,NC]
+	RewriteRule silverstripe-cache(/|$) - [F,L,NC]
+	RewriteRule composer\.(json|lock) - [F,L,NC]
 
 	RewriteCond %{REQUEST_URI} ^(.*)$
 	RewriteCond %{REQUEST_FILENAME} !-f