I have noted that CiviCRM creates .htaccess with the
Deny from all command in stead of the
Require all denied. This causes security issues with my new setup at a hosting site.
Drupal has support for both:
# Deny all requests from Apache 2.4+. <IfModule mod_authz_core.c> Require all denied </IfModule> # Deny all requests from Apache 2.0-2.2. <IfModule !mod_authz_core.c> Deny from all </IfModule>
When is CiviCRM going to support Apache 2.4?