From 1139b5c306ca7348c5aaac398d0bcb6f02da1a5d Mon Sep 17 00:00:00 2001
From: Jerome Tamarelle <jtamarelle@groupe-exp.com>
Date: Wed, 25 Apr 2012 16:36:18 +0200
Subject: [PATCH] Protect composer home against web access

---
 src/Composer/Factory.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/Composer/Factory.php b/src/Composer/Factory.php
index 2996c50a5..8929481c6 100644
--- a/src/Composer/Factory.php
+++ b/src/Composer/Factory.php
@@ -38,6 +38,11 @@ class Factory
             }
         }
 
+        // Protect directory against web access
+        if (!file_exists($home . '/.htaccess')) {
+            @mkdir($home, 0777, true) && @file_put_contents($home . '/.htaccess', 'deny from all');
+        }
+
         $config = new Config();
 
         $file = new JsonFile($home.'/config.json');