From 48f5e9f07a8b8bfc678bd2838ed9b5d9299c326c Mon Sep 17 00:00:00 2001
From: Oliver Davies <oliver@oliverdavies.uk>
Date: Thu, 16 May 2019 12:42:30 +0100
Subject: [PATCH] Add config

---
 config/sync/.htaccess  | 24 ++++++++++++++++++++++++
 config/sync/README.txt |  1 +
 2 files changed, 25 insertions(+)
 create mode 100644 config/sync/.htaccess
 create mode 100644 config/sync/README.txt

diff --git a/config/sync/.htaccess b/config/sync/.htaccess
new file mode 100644
index 0000000..0e4a69a
--- /dev/null
+++ b/config/sync/.htaccess
@@ -0,0 +1,24 @@
+# Deny all requests from Apache 2.4+.
+<IfModule mod_authz_core.c>
+  Require all denied
+</IfModule>
+
+# Deny all requests from Apache 2.0-2.2.
+<IfModule !mod_authz_core.c>
+  Deny from all
+</IfModule>
+
+# Turn off all options we don't need.
+Options -Indexes -ExecCGI -Includes -MultiViews
+
+# Set the catch-all handler to prevent scripts from being executed.
+SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
+<Files *>
+  # Override the handler again if we're run later in the evaluation list.
+  SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
+</Files>
+
+# If we know how to do it safely, disable the PHP engine entirely.
+<IfModule mod_php5.c>
+  php_flag engine off
+</IfModule>
\ No newline at end of file
diff --git a/config/sync/README.txt b/config/sync/README.txt
new file mode 100644
index 0000000..e74ef61
--- /dev/null
+++ b/config/sync/README.txt
@@ -0,0 +1 @@
+This directory contains configuration to be imported into your Drupal site. To make this configuration active, visit admin/config/development/configuration/sync. For information about deploying configuration between servers, see https://www.drupal.org/documentation/administer/config