X-Git-Url: https://dehnerts.com/gitweb/?a=blobdiff_plain;f=mods-available%2Fphp5.conf;fp=mods-available%2Fphp5.conf;h=6eced7636483b5b00efb5bb7ae74c7acc1c714c1;hb=7eb82523b8601ebdabdf76ad85071b43d2c149d0;hp=2533117ac60c3c4fb2628b98883e0dff7e044dd1;hpb=f32a7d63173731a10ebf504c122365c51f75c94d;p=sysconfig%2Fapache2.git

diff --git a/mods-available/php5.conf b/mods-available/php5.conf
index 2533117..6eced76 100644
--- a/mods-available/php5.conf
+++ b/mods-available/php5.conf
@@ -1,16 +1,27 @@
-<IfModule mod_php5.c>
-    <FilesMatch "\.ph(p3?|tml)$">
-	SetHandler application/x-httpd-php
-    </FilesMatch>
-    <FilesMatch "\.phps$">
-	SetHandler application/x-httpd-php-source
-    </FilesMatch>
-    # To re-enable php in user directories comment the following lines
-    # (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
-    # prevents .htaccess files from disabling it.
-    #<IfModule mod_userdir.c>
-    #    <Directory /home/*/public_html>
-    #        php_admin_value engine Off
-    #    </Directory>
-    #</IfModule>
-</IfModule>
+<FilesMatch ".+\.ph(p[345]?|t|tml)$">
+    SetHandler application/x-httpd-php
+</FilesMatch>
+<FilesMatch ".+\.phps$">
+    SetHandler application/x-httpd-php-source
+    # Deny access to raw php sources by default
+    # To re-enable it's recommended to enable access to the files
+    # only in specific virtual host or directory
+    Order Deny,Allow
+    Deny from all
+</FilesMatch>
+# Deny access to files without filename (e.g. '.php')
+<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
+    Order Deny,Allow
+    Deny from all
+</FilesMatch>
+
+# Running PHP scripts in user directories is disabled by default
+# 
+# To re-enable PHP in user directories comment the following lines
+# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
+# prevents .htaccess files from disabling it.
+#<IfModule mod_userdir.c>
+#    <Directory /home/*/public_html>
+#        php_admin_flag engine Off
+#    </Directory>
+#</IfModule>