SECURITY: Create a .htaccess in /vendor after composer runs
[lhc/web/wiklou.git] / includes / composer / ComposerVendorHtaccessCreator.php
1 <?php
2 /**
3 * Copyright (C) 2017 Kunal Mehta <legoktm@member.fsf.org>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
7 * the Free Software Foundation; either version 2 of the License, or
8 * (at your option) any later version.
9 *
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
14 *
15 * You should have received a copy of the GNU General Public License along
16 * with this program; if not, write to the Free Software Foundation, Inc.,
17 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 */
20
21 /**
22 * Creates a .htaccess in the vendor/ directory
23 * to prevent web access.
24 *
25 * This class runs *outside* of the normal MediaWiki
26 * environment and cannot depend upon any MediaWiki
27 * code.
28 */
29 class ComposerVendorHtaccessCreator {
30
31 /**
32 * Handle post-install-cmd and post-update-cmd hooks
33 */
34 public static function onEvent() {
35 $fname = dirname( dirname( __DIR__ ) ) . "/vendor/.htaccess";
36 if ( file_exists( $fname ) ) {
37 // Already exists
38 return;
39 }
40
41 file_put_contents( $fname, "Deny from all\n" );
42 }
43 }