Chris@8: # Turn off all options we don't need.
Chris@8: Options None
Chris@8: Options +FollowSymLinks
Chris@8: 
Chris@8: # Set the catch-all handler to prevent scripts from being executed.
Chris@8: SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
Chris@8: <Files *>
Chris@8:   # Override the handler again if we're run later in the evaluation list.
Chris@8:   SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
Chris@8: </Files>
Chris@8: 
Chris@8: # If we know how to do it safely, disable the PHP engine entirely.
Chris@8: <IfModule mod_php5.c>
Chris@8:   php_flag engine off
Chris@8: </IfModule>
Chris@8: # PHP 4, Apache 1.
Chris@8: <IfModule mod_php4.c>
Chris@8:   php_flag engine off
Chris@8: </IfModule>
Chris@8: # PHP 4, Apache 2.
Chris@8: <IfModule sapi_apache2.c>
Chris@8:   php_flag engine off
Chris@8: </IfModule>
Chris@8: