1234567891011121314151617181920212223 |
- # Deny all requests from Apache 2.4+.
- Require all denied
- # Deny all requests from Apache 2.0-2.2.
- Deny from all
- # Turn off all options we don't need.
- Options -Indexes -ExecCGI -Includes -MultiViews
- # Set the catch-all handler to prevent scripts from being executed.
- SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
- # Override the handler again if we're run later in the evaluation list.
- SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
- # If we know how to do it safely, disable the PHP engine entirely.
- php_flag engine off
|