3 ms·

Woah what, you're not kidding: https://www.novochem.net/.env https://www.novochem.net/.env Laravel should not even render this .env file by default, way too m

Woah what, you're not kidding: https://www.novochem.net/.env https://www.novochem.net/.env Laravel should not even render this .env file by default, way too many results. Laravel has no github issues, so I don't know how to let the author know. https://github.com/laravel/laravel https://github.com/laravel/laravel Someone ping him on twitter

pier25 7y ago
But that would be an Apache or Nginx config, no? Afaik PHP is not the webserver.
- makison 7y ago
  Exactly. Nginx/apache is not pointing to /public/ directory as root of the application/domain. That's why .env is accessible.