diff --git a/config/sync/webform.webform.question.yml b/config/sync/webform.webform.question.yml
index b617523..b2f6b95 100644
--- a/config/sync/webform.webform.question.yml
+++ b/config/sync/webform.webform.question.yml
@@ -18,12 +18,20 @@ title: Question
 description: 'Question for FAQ'
 category: ''
 elements: |-
+  processed_text:
+    '#type': processed_text
+    '#text': |
+      <p>Pour déposer une question, veuillez remplir le formulaire ci-contre. Les champs marqués (*) sont obligatoires.<br />
+      Votre offre de service devra être revue par un administrateur avant publication.</p>
+    '#format': wysiwyg
   couriel:
-    '#type': webform_email_confirm
+    '#type': email
     '#title': Couriel
+    '#required': true
   question:
     '#type': textarea
     '#title': Question
+    '#required': true
   actions:
     '#type': webform_actions
     '#title': 'Submit button(s)'
@@ -130,9 +138,9 @@ settings:
   draft_loaded_message: ''
   draft_pending_single_message: ''
   draft_pending_multiple_message: ''
-  confirmation_type: page
+  confirmation_type: modal
   confirmation_title: ''
-  confirmation_message: ''
+  confirmation_message: 'Votre question a bien &eacute;t&eacute; envoy&eacute;e.'
   confirmation_url: ''
   confirmation_attributes: {  }
   confirmation_back: true
@@ -223,7 +231,7 @@ handlers:
         - completed
       to_mail: julie.andre@popsu.archi.fr
       to_options: {  }
-      cc_mail: ''
+      cc_mail: dev@figureslibres.io
       cc_options: {  }
       bcc_mail: ''
       bcc_options: {  }
diff --git a/private/.htaccess b/private/.htaccess
new file mode 100644
index 0000000..25776a3
--- /dev/null
+++ b/private/.htaccess
@@ -0,0 +1,24 @@
+# Deny all requests from Apache 2.4+.
+<IfModule mod_authz_core.c>
+  Require all denied
+</IfModule>
+
+# Deny all requests from Apache 2.0-2.2.
+<IfModule !mod_authz_core.c>
+  Deny from all
+</IfModule>
+
+# Turn off all options we don't need.
+Options -Indexes -ExecCGI -Includes -MultiViews
+
+# Set the catch-all handler to prevent scripts from being executed.
+SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
+<Files *>
+  # Override the handler again if we're run later in the evaluation list.
+  SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
+</Files>
+
+# If we know how to do it safely, disable the PHP engine entirely.
+<IfModule mod_php7.c>
+  php_flag engine off
+</IfModule>
\ No newline at end of file
diff --git a/web/profiles/d8-starterkit-profile b/web/profiles/d8-starterkit-profile
index 6fe8986..9b46db9 160000
--- a/web/profiles/d8-starterkit-profile
+++ b/web/profiles/d8-starterkit-profile
@@ -1 +1 @@
-Subproject commit 6fe8986494069c7e9bf019cbe98d8f2c7d5166d0
+Subproject commit 9b46db9c56faf2cbc965ea1b76ce5345e7f46c0f