annotate .htaccess @ 1:f38015048f48 tip

Added GPL

<IfModule mod_authz_core.c>
    Require all granted
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Allow from all
</IfModule>

Options -Indexes 
Options +FollowSymLinks
ErrorDocument 403 /404/
ErrorDocument 404 /404/

# Use the front controller as index file. It serves as a fallback solution when
# every other rewrite/redirect fails (e.g. in an aliased environment without
# mod_rewrite). Additionally, this reduces the matching process for the
# start page (path "/") because otherwise Apache will apply the rewriting rules
# to each configured DirectoryIndex file (e.g. index.php, index.html, index.pl).
DirectoryIndex a_prod.php

<IfModule mod_rewrite.c>
    RewriteEngine On

    # Determine the RewriteBase automatically and set it as environment variable.
    # If you are using Apache aliases to do mass virtual hosting or installed the
    # project in a subdirectory, the base path will be prepended to allow proper
    # resolution of the a_prod.php file and to redirect to the correct URI. It will
    # work in environments without path prefix as well, providing a safe, one-size
    # fits all solution. But as you do not need it in this case, you can comment
    # the following 2 lines to eliminate the overhead.
    RewriteCond %{REQUEST_URI}::$1 ^(/.+)/(.*)::\2$
    RewriteRule ^(.*) - [E=BASE:%1]

    # Redirect to URI without front controller to prevent duplicate content
    # (with and without `/a_prod.php`). Only do this redirect on the initial
    # rewrite by Apache and not on subsequent cycles. Otherwise we would get an
    # endless redirect loop (request -> rewrite to front controller ->
    # redirect -> request -> ...).
    # So in case you get a "too many redirects" error or you always get redirected
    # to the start page because your Apache does not expose the REDIRECT_STATUS
    # environment variable, you have 2 choices:
    # - disable this feature by commenting the following 2 lines or
    # - use Apache >= 2.3.9 and replace all L flags by END flags and remove the
    #   following RewriteCond (best solution)
    RewriteCond %{ENV:REDIRECT_STATUS} ^$
    RewriteRule ^app\.php(/(.*)|$) %{ENV:BASE}/$2 [R=301,L]

    # If the requested filename exists, simply serve it.
    # We only want to let Apache serve files and not directories.
    RewriteCond %{REQUEST_FILENAME} -f
    RewriteRule .? - [L]

    # Rewrite all other queries to the front controller.
    RewriteRule .? %{ENV:BASE}/a_prod.php [L]
</IfModule>

## App entry point
<IfModule !mod_rewrite.c>
    <IfModule mod_alias.c>
        # When mod_rewrite is not available, we instruct a temporary redirect of
        # the start page to the front controller explicitly so that the website
        # and the generated links can still be used.
        RedirectMatch 302 ^/$ /a_prod.php/
        # RedirectTemp cannot be used instead
    </IfModule>
</IfModule>

## HTTP Caching
<ifModule mod_headers.c>
    <filesMatch "\.(ico|jpe?g|jpg|png|gif|swf|css|js)$">
        Header unset Pragma
        FileETag None
        Header unset ETag
        #10 years
        Header set Cache-Control "max-age=315360000, public, must-revalidate"
        #Header set Cache-Control "max-age=315360000, public"
        Header unset Last-Modified
    </filesMatch>
</IfModule>

## Gzip
<ifmodule mod_deflate.c>
AddOutputFilterByType DEFLATE text/text text/html text/plain text/xml text/css application/x-javascript application/javascript text/javascript
</ifmodule>

## Deny access to some files and folders
<FilesMatch "\.buildpath|\.hgignore|\.project|composer\..*|readme\.txt|SYMFONY-LICENSE">
  Order allow,deny
  Deny from all
</FilesMatch>
RedirectMatch 404 /\\.hg(/.*|$)
RedirectMatch 404 /\\.hgcheck(/.*|$)
RedirectMatch 404 /\\.settings(/.*|$)