Pico/.htaccess

<IfModule mod_rewrite.c>
    RewriteEngine On
    # May be required to access sub directories
    #RewriteBase /

    # Deny access to internal dirs and files by passing the URL to Pico
    RewriteRule ^(config|content|content-sample|lib|vendor)(/|$) index.php [L]
    RewriteRule ^(CHANGELOG\.md|composer\.(json|lock|phar))(/|$) index.php [L]
    RewriteRule (^\.|/\.)(?!well-known(/|$)) index.php [L]

    # Enable URL rewriting
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^ index.php [L]

    <IfModule mod_env.c>
        # Let Pico know about available URL rewriting
        SetEnv PICO_URL_REWRITING 1
    </IfModule>
</IfModule>

# Prevent file browsing
Options -Indexes -MultiViews
add rewrite base directive 2015-05-25 11:51:18 +00:00			`<IfModule mod_rewrite.c>`
			`RewriteEngine On`
Use Pico's 404.md to deny access to lib, content... dirs 2016-04-24 02:06:40 +00:00			`# May be required to access sub directories`
add rewrite base directive 2015-05-25 11:51:18 +00:00			`#RewriteBase /`
Support REQUEST_URI routing method With Pico 1.0 you had to setup URL rewriting (e.g. using `mod_rewrite` on Apache) in a way that rewritten URLs follow the `QUERY_STRING` principles. Starting with version 1.1, Pico additionally supports the `REQUEST_URI` routing method, what allows you to simply rewrite all requests to just `index.php`. Pico then reads the requested page from the `REQUEST_URI` environment variable provided by the webserver. Please note that `QUERY_STRING` takes precedence over `REQUEST_URI`. 2016-04-24 18:11:05 +00:00
Update .htaccess Sync with Pico 1.0.3; see ee5b4f0 2016-04-27 19:07:59 +00:00			`# Deny access to internal dirs and files by passing the URL to Pico`
Improve .htaccess regex Deny access to all dot files and dirs by default (except .well-known) Update nginx rules accordingly and pass denied requests to Pico rather than letting nginx send a 404 response 2017-12-24 12:58:42 +00:00			`RewriteRule ^(config\|content\|content-sample\|lib\|vendor)(/\|$) index.php [L]`
Deny access to composer.phar in .htaccess This file might be present if users strictly follow our install instructions and don't delete it on their own after successfully installing Pico. 2018-01-27 20:03:45 +00:00			`RewriteRule ^(CHANGELOG\.md\|composer\.(json\|lock\|phar))(/\|$) index.php [L]`
Improve .htaccess regex Deny access to all dot files and dirs by default (except .well-known) Update nginx rules accordingly and pass denied requests to Pico rather than letting nginx send a 404 response 2017-12-24 12:58:42 +00:00			`RewriteRule (^\.\|/\.)(?!well-known(/\|$)) index.php [L]`
Support REQUEST_URI routing method With Pico 1.0 you had to setup URL rewriting (e.g. using `mod_rewrite` on Apache) in a way that rewritten URLs follow the `QUERY_STRING` principles. Starting with version 1.1, Pico additionally supports the `REQUEST_URI` routing method, what allows you to simply rewrite all requests to just `index.php`. Pico then reads the requested page from the `REQUEST_URI` environment variable provided by the webserver. Please note that `QUERY_STRING` takes precedence over `REQUEST_URI`. 2016-04-24 18:11:05 +00:00
			`# Enable URL rewriting`
add rewrite base directive 2015-05-25 11:51:18 +00:00			`RewriteCond %{REQUEST_FILENAME} !-f`
			`RewriteCond %{REQUEST_FILENAME} !-d`
Support REQUEST_URI routing method With Pico 1.0 you had to setup URL rewriting (e.g. using `mod_rewrite` on Apache) in a way that rewritten URLs follow the `QUERY_STRING` principles. Starting with version 1.1, Pico additionally supports the `REQUEST_URI` routing method, what allows you to simply rewrite all requests to just `index.php`. Pico then reads the requested page from the `REQUEST_URI` environment variable provided by the webserver. Please note that `QUERY_STRING` takes precedence over `REQUEST_URI`. 2016-04-24 18:11:05 +00:00			`RewriteRule ^ index.php [L]`
Update .htaccess 2015-08-28 16:37:36 +00:00
			`<IfModule mod_env.c>`
Support REQUEST_URI routing method With Pico 1.0 you had to setup URL rewriting (e.g. using `mod_rewrite` on Apache) in a way that rewritten URLs follow the `QUERY_STRING` principles. Starting with version 1.1, Pico additionally supports the `REQUEST_URI` routing method, what allows you to simply rewrite all requests to just `index.php`. Pico then reads the requested page from the `REQUEST_URI` environment variable provided by the webserver. Please note that `QUERY_STRING` takes precedence over `REQUEST_URI`. 2016-04-24 18:11:05 +00:00			`# Let Pico know about available URL rewriting`
Update .htaccess 2015-08-28 16:37:36 +00:00			`SetEnv PICO_URL_REWRITING 1`
			`</IfModule>`
Initial commit. 2012-04-04 13:45:09 +00:00			`</IfModule>`

			`# Prevent file browsing`
Force Apache's MultiViews feature to be disabled Thanks @sonst-was for reporting this. Resolves #329 2016-02-24 22:27:35 +00:00			`Options -Indexes -MultiViews`