TYPO3 Core

I'd like to propose more secure [fileDenyPattern]

\.[php|inc|dhtml|pl|cgi]+$|\.php.$|.*\.[php|phpx|pl|inc|dhtml|pl|cgi]+\..*$|\.htaccess$

Standard pattern is \.php$|\.php.$ and that prevent from:
1) .php
2) *.php4,.php5, etc. -> *.php[any char here]

That of course not all ext that may be executed on server.

The extended (suggested) pattern prevent from all well known script ext as:
a) php
b) inc
c) dhtml
e) pl
f) cgi

additionally it prevents from making double extension like *php.rar, *.inc.rar, etc. See http://forums.deftechgroup.com/archive/index.php/t-1638.html to get information about the problem.

Finally it prevents from uploading .htaccess.

(issue imported from #M4104)