tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-09-30 13:19:11 +02:00
Code Issues Projects Releases Wiki Activity

Improve .htaccess commenting

Browse Source 
Done alongside improvements of the execution-pipeline.md docs.
Installer comment taken from d5723f7.
This commit is contained in:
Ingo Schommer 2014-11-15 14:41:50 +13:00
parent 646a57c324
commit 5babab81ee
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
dev/install/install.php5
View File

@ -1496,24 +1496,26 @@ HTML;
else $baseClause = ""; else $baseClause = "";
$modulePath = FRAMEWORK_NAME; $modulePath = FRAMEWORK_NAME;
$rewrite = <<<TEXT $rewrite = <<<TEXT
# Deny access to templates (but allow from localhost)
<Files *.ss> <Files *.ss>
Order deny,allow Order deny,allow
Deny from all Deny from all
Allow from 127.0.0.1 Allow from 127.0.0.1
</Files> </Files>
# Deny access to IIS configuration
<Files web.config> <Files web.config>
Order deny,allow Order deny,allow
Deny from all Deny from all
</Files> </Files>
# This denies access to all yml files, since developers might include sensitive # Deny access to YAML configuration files which might include sensitive information
# information in them. See the docs for work-arounds to serve some yaml files
<Files *.yml> <Files *.yml>
Order allow,deny Order allow,deny
Deny from all Deny from all
</Files> </Files>
# Route errors to static pages automatically generated by SilverStripe
ErrorDocument 404 /assets/error-404.html ErrorDocument 404 /assets/error-404.html
ErrorDocument 500 /assets/error-500.html ErrorDocument 500 /assets/error-500.html
@ -1522,10 +1524,13 @@ ErrorDocument 500 /assets/error-500.html
RewriteEngine On RewriteEngine On
$baseClause $baseClause
# Deny access to potentially sensitive files and folders
RewriteRule ^vendor(/|$) - [F,L,NC] RewriteRule ^vendor(/|$) - [F,L,NC]
RewriteRule silverstripe-cache(/|$) - [F,L,NC] RewriteRule silverstripe-cache(/|$) - [F,L,NC]
RewriteRule composer\.(json|lock) - [F,L,NC] RewriteRule composer\.(json|lock) - [F,L,NC]
# Process through SilverStripe if no file with the requested name exists.
# Pass through the original path as a query parameter, and retain the existing parameters.
RewriteCond %{REQUEST_URI} ^(.*)$ RewriteCond %{REQUEST_URI} ^(.*)$
RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule .* $modulePath/main.php?url=%1 [QSA] RewriteRule .* $modulePath/main.php?url=%1 [QSA]