http://y3vqwcedlakbqmffsn3yxtujyv2yxydqmxufzwru5oupeaupsfim7pid.onion/source/v1.0b/index.php.txt
Version source Require all denied Or else:
in this .secret create file .secret/.htaccess and there place 1 line:
deny from all
but MAKE SURE it works, e.g. tell apache (this domain or all) to respect htaccess files
or at least respect "limit" in them, e.g. in /etc/apache2/conf-available/security.conf place: AllowOverride Limit in either way check in browser that you can view this domain but you can not read URL .secret/ there
nor .secret/config.ini (after creating that dir...