--- C:/Users/arsi/Desktop/typo3_src+dummy-4.2.8/t3lib/config_default.php	Fri Jul 03 21:56:12 2009
+++ C:/Users/arsi/Desktop/typo3_src+dummy-4.2.8/t3lib/config_default.php.patched	Thu Sep 10 00:09:24 2009
@@ -17,7 +17,7 @@
 if (!defined ('PATH_typo3conf')) 	die ('The configuration path was not properly defined!');
 
 //Security related constant: Default value of fileDenyPattern
-define('FILE_DENY_PATTERN_DEFAULT', '\.php[3-6]?(\..*)?$|^\.htaccess$');
+define('FILE_DENY_PATTERN_DEFAULT', '\.(php([3-6]|sh)?|phtml)$|^\.ht(access|passwd)$');
 
 //Security related constant: Comma separated list of file extensions that should be registered as php script file extensions
 define('PHP_EXTENSIONS_DEFAULT', 'php,php3,php4,php5,php6,phpsh,inc');