From 8fb7ab5a618dc0a1b525f16da2d9beab139be2e1 Mon Sep 17 00:00:00 2001
From: Dhiresh A Jain <dhireshajain94@gmail.com>
Date: Thu, 18 Sep 2014 10:49:20 +0530
Subject: [PATCH] Prevented access to problems and codes

Participants would be prevented from accessing problems and codes
---
 README | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/README b/README
index 37a313a..f8a02e5 100644
--- a/README
+++ b/README
@@ -29,3 +29,31 @@ HOW TO CHANGE SETTINGS AFTER INITIAL SETUP
 ADMIN ACCOUNT
 ==================================================
 The admin account is 'admin' with password 'onj'. To change the password, either manually do it in the database (ugly) or edit the dbinit.sql file before running setup
+==================================================
+
+ADDING SECURITY FEATURE
+While setting up onj using apache server, prevent access to files/directories by following these instructions:
+
+Open the file /etc/apache2/apache2.conf
+
+Insert the following lines of code:
+
+<Directory /var/www/html/onj/problems>
+  Order Deny,Allow
+  Deny from all
+</Directory>
+
+
+<Directory /var/www/html/onj/code>
+  Order Deny,Allow
+  Deny from all
+</Directory>
+
+
+<Directory /var/www/html/onj/admin>
+  Order Deny,Allow
+  Deny from all
+</Directory>
+
+==================================================
+