function HtaccessTest::getProtectedFiles

Get an array of file paths for access testing.

File

modules/system/system.test, line 3300

Class

HtaccessTest

Tests .htaccess is working correctly.

Code

protected function getProtectedFiles() {
    drupal_mkdir($path = 'public://' . $this->randomName());
    // Tests the FilesMatch directive which denies access to certain file
    // extensions.
    $file_exts_to_deny = array(
        'engine',
        'inc',
        'info',
        'install',
        'make',
        'module',
        'module~',
        'module.bak',
        'module.orig',
        'module.save',
        'module.swo',
        'module.swp',
        'php~',
        'php.bak',
        'php.orig',
        'php.save',
        'php.swo',
        'php.swp',
        'profile',
        'po',
        'sh',
        'sql',
        'test',
        'theme',
        'tpl.php',
        'xtmpl',
    );
    foreach ($file_exts_to_deny as $file_ext) {
        $file_paths["{$path}/access_test.{$file_ext}"] = 403;
    }
    // Test extensions that should be permitted.
    $file_exts_to_allow = array(
        'php-info.txt',
    );
    foreach ($file_exts_to_allow as $file_ext) {
        $file_paths["{$path}/access_test.{$file_ext}"] = 200;
    }
    // Ensure web server configuration files cannot be accessed.
    $file_paths["{$path}/.htaccess"] = 403;
    $file_paths["{$path}/web.config"] = 403;
    return $file_paths;
}