Skip to content

[SECURITY] Proteksi .env & Konfigurasi Variabel Lingkungan (Sensitive Infromation Exposure) #982

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
pandigresik wants to merge 6 commits into
base: rilis-dev
Choose a base branch
from
Open

[SECURITY] Proteksi .env & Konfigurasi Variabel Lingkungan (Sensitive Infromation Exposure) #982

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
9262626
[SECURITY] Proteksi .env & Konfigurasi Variabel Lingkungan (Sensitive…
pandigresik Mar 11, 2026
39d7c4a
perbaiki github action
pandigresik Mar 11, 2026
5191e9e
perbaiki github action
pandigresik Mar 11, 2026
7e0e946
Merge branch 'dev-967' of github.com:OpenSID/OpenKab into dev-967
pandigresik Mar 11, 2026
e459622
Merge remote-tracking branch 'origin/rilis-dev' into dev-967
pandigresik Jun 26, 2026
3ca7c00
update example
pandigresik Jun 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion .github/workflows/fresh-install-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,4 +50,7 @@ jobs:
DB_DATABASE: testing_db
DB_USERNAME: root
DB_PASSWORD: secret
run: php artisan migrate --seed && php artisan test
OPENKAB_DB_DATABASE: testing_gabungan_db
OPENKAB_DB_USERNAME: root
OPENKAB_DB_PASSWORD: secret
run: php artisan key:generate && php artisan migrate --seed && php artisan test
18 changes: 18 additions & 0 deletions public/.htaccess
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@

RewriteEngine On

# Block access to dotfiles (including .env)
RewriteCond %{REQUEST_URI} ^/\.env [NC]
RewriteRule ^ - [R=404,L]

# Handle Authorization Header
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
Expand All @@ -29,3 +33,17 @@
Order Allow,Deny
Allow from all
</Files>

# Block direct access to .env and other dotfiles
<FilesMatch "^\.env">
Require all denied
</FilesMatch>

# Fallback for Apache 2.2
<IfModule !mod_authz_core.c>
<FilesMatch "^\.env">
order allow,deny
deny from all
Satisfy All
</FilesMatch>
</IfModule>
Loading