X-Git-Url: https://jasonwoof.com/gitweb/?p=wfpl-cms.git;a=blobdiff_plain;f=.htaccess;h=3847e70629da989ae165b81e032a44a0b4d5928a;hp=e8dd622dc77d323b93310ae10928eef33c6d0f82;hb=0a5d51b1488c91a5b6387d440ab16c04ef10bac8;hpb=3a7b73338492c387b55cbbe7c451a6e41624119c

diff --git a/.htaccess b/.htaccess
index e8dd622..3847e70 100644
--- a/.htaccess
+++ b/.htaccess
@@ -2,14 +2,29 @@ php_value post_max_size 25M
 php_value upload_max_filesize 20M
 php_flag register_globals off
 php_flag magic_quotes_gpc off
-Options -MultiViews
 DirectorySlash Off
 DirectoryIndex disabled
 AddDefaultCharset UTF-8
+AddCharset UTF-8 .css
 RewriteEngine  on
-RewriteRule    ^[^/.]*$  /run.php [L]
+RewriteRule ^[^/.]*$ /wfpl_main.php [L]
 
 <FilesMatch "\.(css|jpg|png)$">
 	ExpiresActive On
 	ExpiresDefault A31536000
 </FilesMatch>
+
+# SECURITY: don't execute code on the server (exception below)
+SetHandler none
+SetHandler default-handler
+# this option is needed for RewriteRule to work:
+Options SymlinksIfOwnerMatch
+php_flag engine off
+RemoveHandler .cgi .php .php3 .php4 .php5 .phtml .pl .py .pyc .pyo
+# code execution exception: allow only /wfpl_main.php
+# <Files> matches regardless of directory/path, so rewrite php in subdirs
+RewriteRule ^.*/.*\.php$ - [L,R=404]
+<Files "wfpl_main.php">
+	php_flag engine on
+	SetHandler application/x-httpd-php
+</Files>