30 lines
No EOL
883 B
ApacheConf
30 lines
No EOL
883 B
ApacheConf
# DATEI: ./.htaccess
|
|
Options -Indexes
|
|
RewriteEngine On
|
|
|
|
# Interne PHP- und Template-Verzeichnisse vor direktem Webzugriff sperren
|
|
RewriteRule ^(home|philcore)/(app|core|views|src)/ - [F,L]
|
|
|
|
# Sensible Dateien und Verzeichnisse vor direktem Webzugriff schützen
|
|
<FilesMatch "(^\.|\.(json|lock|sql|env|md)$)">
|
|
Require all denied
|
|
</FilesMatch>
|
|
|
|
<Files "auth.php">
|
|
Require all denied
|
|
</Files>
|
|
|
|
# 1. Dynamische XML/TXT Dateien -> Ab zum SeoController
|
|
RewriteRule ^sitemap\.xml$ home/public/index.php?url=seo/sitemap [L,QSA]
|
|
RewriteRule ^robots\.txt$ home/public/index.php?url=seo/robots [L,QSA]
|
|
|
|
# 2. Domain-Einstieg
|
|
RewriteRule ^$ home/public/index.php [L]
|
|
|
|
# 3. Echte Assets schützen
|
|
RewriteCond %{REQUEST_FILENAME} !-f
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
RewriteCond %{REQUEST_URI} !^/home/public/
|
|
|
|
# 4. Globales Routing
|
|
RewriteRule ^(.*)$ home/public/index.php?url=$1 [L,QSA] |