router: send proper HTTP header when access denied

Co-authored-by: Henry Pan <git@phy25.com>

1 files changed, 1 insertions, 0 deletions

diff --git a/index.php b/index.php
index d62a3877f..4a9ed0834 100644
--- a/index.php
+++ b/index.php
@@ -52,6 +52,7 @@ if (preg_match('/^\/_media\/(.*)/', $_SERVER['SCRIPT_NAME'], $m)) {
     if (preg_match('/\/([._]ht|README$|VERSION$|COPYING$)/', $_SERVER['SCRIPT_NAME']) or
         preg_match('/^\/(data|conf|bin|inc)\//', $_SERVER['SCRIPT_NAME'])
     ) {
+        header('HTTP/1.1 403 Forbidden');
         die('Access denied');
     }