Deny access to files without filename (e.g. '.php')

May 31, 2015 · View on GitHub

<FilesMatch ".+.ph(p[3457]?|t|tml)">SetHandlerapplication/xhttpdphp</FilesMatch><FilesMatch".+p˙hps"> SetHandler application/x-httpd-php </FilesMatch> <FilesMatch ".+\.phps"> SetHandler application/x-httpd-php-source # Deny access to raw php sources by default # To re-enable it's recommended to enable access to the files # only in specific virtual host or directory Require all denied

Deny access to files without filename (e.g. '.php')

<FilesMatch "^.ph(p[3457]?|t|tml|ps)$"> Require all denied

Running PHP scripts in user directories is disabled by default

To re-enable PHP in user directories comment the following lines

(from <IfModule ...> to .) Do NOT set it to On as it

prevents .htaccess files from disabling it.

php_admin_flag engine Off