Merge remote-tracking branch '39228/feat/disable-nginx-setup-route' into comps_78764_2205

Author: engcom-Charlie

nginx.conf.sample

@@ -47,6 +47,11 @@ location /.user.ini {
 location ~* ^/setup($|/) {
     root $MAGE_ROOT;
     location ~ ^/setup/index.php {
+        deny all;
+        # If you want to enable the web based setup functionality, add your
+        # ip address to the allow list below or comment out the deny all above.
+        # allow 127.0.0.1;
+
         fastcgi_pass   fastcgi_backend;
 
         fastcgi_param  PHP_FLAG  "session.auto_start=off \n suhosin.session.cryptua=off";

setup/.htaccess

@@ -1,3 +1,15 @@
+# If you want to enable the web based setup functionality, add your ip address
+# to the allow list below or comment out the IfVersion Deny deny blocks below.
+<Files "index.php">
+    <IfVersion < 2.4>
+        order allow,deny
+        deny from all
+    </IfVersion>
+    <IfVersion >= 2.4>
+        Require all denied
+    </IfVersion>
+</Files>
+
 Options -Indexes
 
 <IfModule mod_rewrite.c>