php_value post_max_size 250M php_value upload_max_filesize 200M php_flag register_globals off php_flag magic_quotes_gpc off DirectorySlash Off DirectoryIndex disabled AddDefaultCharset UTF-8 AddCharset UTF-8 .css RewriteEngine on RewriteRule ^[^/.]*$ /wfpl_main.php [L] ExpiresActive On ExpiresDefault A31536000 # SECURITY: don't execute code on the server (exception below) SetHandler none SetHandler default-handler # this option is needed for RewriteRule to work: Options SymlinksIfOwnerMatch php_flag engine off RemoveHandler .cgi .php .php3 .php4 .php5 .phtml .pl .py .pyc .pyo # code execution exception: allow only /wfpl_main.php # matches regardless of directory/path, so rewrite php in subdirs RewriteRule ^(wfpl_main\.php|paypal_ipn\.php|cms_images_autoresize\.php)$ - [L] RewriteRule .*\.php$ - [L,R=404] php_flag engine on SetHandler application/x-httpd-php php_flag engine on SetHandler application/x-httpd-php php_flag engine on SetHandler application/x-httpd-php RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^cms_images/[0-9a-f]+w[0-9]+\.[pj][np]g$ /cms_images_autoresize.php