Hi,

Its good idea, we need to check if its posible to have all directives in one 
file we will do this.
We added this as a bug: https://bugs.oxid-esales.com/view.php?id=3095


Linas Kukulskis
Developer

[email protected]<mailto:[email protected]>
Phone +370 37 333053
Fax +370 37 333054
www.oxid-esales.com<http://www.oxid-esales.com/?campaign=emailsignatur/lt/oxid-esales-com>


OXID eSales AG
Bertoldstraße 48, 79098 Freiburg, Germany

Lithuanian Division
K. Petrausko g. 26-316, Kaunas LT-44158, Lithuania


Sales tax identification number: DE 231 450 866
Board of directors authorized to represent the company:
Roland Fesenmayr (chairman), Eric Jankowfsky, Andrea Seeger
Chairman of the supervisory board: Harald Fuchs
Head office Freiburg: Bertoldstraße 48, 79098 Freiburg, Germany
Court of registration: Amtsgericht Freiburg i. Br., HRB 701648, Office 
reference number: 06/447/41949


[OXID eShop 
4]<http://www.oxid-esales.com/en/products/professional-edition?campaign=emailsignatur/lt/oxid-eshop-4>
The next Generation of Premium 
eCommerce<http://www.oxid-esales.com/en/products/professional-edition?campaign=emailsignatur/lt/oxid-eshop-4>

[OXID eShop Community 
Edition]<http://www.oxid-esales.com/en/products/community-edition?campaign=emailsignatur/lt/oxid-eshop-ce>
Latest version OXID eShop 4 as open 
source<http://www.oxid-esales.com/en/products/community-edition?campaign=emailsignatur/lt/oxid-eshop-ce>


________________________________
From: [email protected] 
[[email protected]] on behalf of development 
[[email protected]]
Sent: Tuesday, July 05, 2011 8:14 PM
To: [email protected]
Subject: [oxid-dev-general] .htaccess files

Hi everybody

Out of curiosity I looked into the various .htaccess files (4 in CE and 5 in 
PE).

I’m no expert in this matter and I could be wrong (if so please enlighten me) 
but to my understanding I found out the following:
1. some lines are inconsistent the way they are written
2. some lines are redundant
3. some lines could be ported into the .htaccess in the root

Do you see any problem with having only one .htaccess file in the root?
It should work and the performance doesn't change anyway according to the 
Apache manual (http://httpd.apache.org/docs/2.0/howto/htaccess.html):
…
Further note that Apache must look for .htaccess files in all
higher-level directories, in order to have a full complement of
directives that it must apply. (See section on how directives are
applied.) Thus, if a file is requested out of a directory
/www/htdocs/example, Apache must look for the following files:

/.htaccess
/www/.htaccess
/www/htdocs/.htaccess
/www/htdocs/example/.htaccess
…

Possible changes are marked ad [1], [2], [3]:

---------------------
.htaccess from /: (everything’s ok, just for your convenience listed)
---------------------
<IfModule mod_rewrite.c>

Options +FollowSymLinks
RewriteEngine On
RewriteBase /

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]

RewriteCond %{REQUEST_URI} oxseo\.php$
RewriteCond %{QUERY_STRING} mod_rewrite_module_is=off
RewriteRule oxseo\.php$ oxseo.php?mod_rewrite_module_is=on [L]

RewriteCond %{REQUEST_URI} 
!(\/admin\/|\/core\/|\/export\/|\/modules\/|\/out\/|\/setup\/|\/tmp\/|\/views\/)
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule !(\.html|\/|\.jpg|\.css|\.pdf|\.doc|\.gif|\.png|\.js|\.htc)$ 
%{REQUEST_URI}/ [R=301,L]

RewriteCond %{REQUEST_URI} 
!(\/admin\/|\/core\/|\/export\/|\/modules\/|\/out\/|\/setup\/|\/tmp\/|\/views\/)
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule (\.html|\/)$ oxseo.php


</IfModule>

# disabling log file access from outside
<FilesMatch "(EXCEPTION_LOG\.txt|\.log$|\.tpl$|pkg.rev)">
order allow,deny
deny from all
</FilesMatch>

Options -Indexes
DirectoryIndex index.php index.html

---------------------
.htaccess in /admin/wysiwygpro/temp/:
---------------------
deny from all [1] [2]

---------------------
.htaccess in /admin/tpl/:
---------------------
AuthUserFile /dev/null [1]
AuthName Forbidden [1]
AuthType Basic  [1]

<Limit GET POST> [1]
require valid-user [1]
</Limit> [1]

---------------------
.htaccess in /log:
---------------------
# disabling file access [2] [3]
<FilesMatch .*> [1] [2] [3]
order allow,deny [2] [3]
deny from all [2] [3]
</FilesMatch> [2] [3]

Options –Indexes [2] [3]

---------------------
.htaccess in /tmp:
---------------------
# disabling log file access from outside [2] [3]
<FilesMatch .*> [1] [2] [3]
order allow,deny [2] [3]
deny from all [2] [3]
</FilesMatch> [2] [3]

Options -Indexes [2] [3]



Regards
Marc

ORCA Services AG
Herrenmattstrasse 26
CH-4132 Muttenz
Office Basel: Aeschengraben 10, CH-4051 Basel

[email protected]<mailto:[email protected]>
T. +41 61 205 80 80
T. +41 61 205 80 73 (direkt)
F. +41 61 205 80 81

www.orca.ch<http://www.orca.ch>, 
www.orca-services.ch<http://www.orca-services.ch>

"We convert your visitors into customers."

_______________________________________________
dev-general mailing list
[email protected]
http://dir.gmane.org/gmane.comp.php.oxid.general

Reply via email to