################################################################################ # CONTENIDO AMR plugin restrictive rewrite rules set. # # Contains strict rules, each rewrite exclusion must be set manually. # - Exclude requests to directories usage/, contenido/, setup/, cms/upload/ # - Exclude requests to cms/front_content.php # - Pass thru requests to common ressources (pictures, movies, js, css, pdf) # # @version 0.0.1 # @author Murat Purc # @copyright four for business AG # @license http://www.contenido.org/license/LIZENZ.txt # @link http://www.4fb.de # @link http://www.contenido.org # # $Id: htaccess_restrictive.txt 3503 2012-10-19 19:49:39Z xmurrix $ ################################################################################ # Enable following lines to run PHP5 on 1und1.de (1and1.com) #AddType x-mapp-php5 .php #AddHandler x-mapp-php5 .php # Enable rewrite engine RewriteEngine on # Specify a base URL-path for the rules RewriteBase /cms # Catch some common exploits in query string to get rid of them. # NOTE: Conditions to prevent protocols (ftp, http[s]) in query string could # be a disadvantage in some cases. RewriteCond %{QUERY_STRING} contenido_path=.*$ [NC,OR] RewriteCond %{QUERY_STRING} cfg\[path\]=.*$ [NC,OR] RewriteCond %{QUERY_STRING} _PHPLIB\[libdir\]=.*$ [NC,OR] RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} ftp://.*$ [NC,OR] RewriteCond %{QUERY_STRING} http[s]*://.*$ [NC] RewriteRule ^.* - [F,L] # all matching conditions from above will end in nirvana # Exclude some files and directories from rewriting RewriteRule ^usage/.*$ - [L] RewriteRule ^conlite/.*$ - [L] RewriteRule ^setup/.*$ - [L] RewriteRule ^cms/upload/.*$ - [L] RewriteRule ^cms/test/.*$ - [L] RewriteRule ^cms/front_content.php.*$ - [L] # Exclude common extensions from rewriting and pass remaining requests to # front_content.php. RewriteRule !\.(avi|css|doc|flv|gif|gzip|ico|jpeg|jpg|js|mov|mp3|pdf|png|ppt|rar|swf|txt|wav|wmv|xml|zip)$ front_content.php [NC,QSA,L] # Some rules to compress files. # NOTE: Following settings are not mod rewrite specific, but enabling mod_deflate # for some file types can help to reduce bandwith. SetOutputFilter DEFLATE