Club Drupal

    $lines = <<<EOF

# Deny all requests from Apache 2.4+.

<IfModule mod_authz_core.c>

  Require all denied

</IfModule>

# Deny all requests from Apache 2.0-2.2.

<IfModule !mod_authz_core.c>

  Deny from all

</IfModule>

EOF

    . "\n\n" . $lines;

    // Track non-public files in the session if they were uploaded by an

    // anonymous user. This allows modules such as the File module to only

    // grant view access to the specific anonymous user who uploaded the file.

    // See file_file_download().

    // The 'file_public_schema' variable is used to allow other publicly

    // accessible file schemes to be treated the same as the public:// scheme

    // provided by Drupal core and to avoid adding unnecessary data to the

    // session (and the resulting bypass of the page cache) in those cases. For

    // security reasons, only schemes that are completely publicly accessible,

    // with no download restrictions, should be added to this variable. See

    // file_managed_file_value().

    if (!$user->uid && !in_array($destination_scheme, variable_get('file_public_schema', array('public')))) {

      $_SESSION['anonymous_allowed_file_ids'][$file->fid] = $file->fid;

    }