2017-12-17 15:10:49 +08:00
|
|
|
# Disable index view
|
|
|
|
Options -Indexes
|
|
|
|
|
2017-12-24 00:28:56 +08:00
|
|
|
## Hide a specific file
|
|
|
|
#<Files .env>
|
|
|
|
# Order allow,deny
|
|
|
|
# Deny from all
|
|
|
|
#</Files>
|
|
|
|
#
|
|
|
|
#<Files env.php>
|
|
|
|
# Order allow,deny
|
|
|
|
# Deny from all
|
|
|
|
#</Files>
|
|
|
|
#
|
|
|
|
## Hide a specific file
|
|
|
|
#<Files storage>
|
|
|
|
# Order allow,deny
|
|
|
|
# Deny from all
|
|
|
|
#</Files>
|
2017-12-17 15:10:49 +08:00
|
|
|
|
2017-12-24 00:15:18 +08:00
|
|
|
RewriteEngine On
|
2017-12-17 15:10:49 +08:00
|
|
|
|
2017-12-24 00:28:56 +08:00
|
|
|
# Deny all these files/folders
|
|
|
|
RedirectMatch 403 ^/.git/.*?$
|
|
|
|
RedirectMatch 403 ^/.travis/.*?$
|
|
|
|
RedirectMatch 403 ^/app/.*?$
|
|
|
|
RedirectMatch 403 ^/bootstrap/.*?$
|
|
|
|
RedirectMatch 403 ^/config/.*?$
|
|
|
|
RedirectMatch 403 ^/modules/.*?$
|
|
|
|
RedirectMatch 403 ^/node_modules/.*?$
|
|
|
|
RedirectMatch 403 ^/resources/.*?$
|
|
|
|
RedirectMatch 403 ^/storage/.*?$
|
|
|
|
RedirectMatch 403 ^/tests/.*?$
|
|
|
|
RedirectMatch 403 ^/vendor/.*?$
|
|
|
|
RedirectMatch 403 ^/.bowerrc$
|
|
|
|
RedirectMatch 403 ^/artisan$
|
|
|
|
RedirectMatch 403 ^/composer.json
|
|
|
|
RedirectMatch 403 ^/composer.lock
|
|
|
|
RedirectMatch 403 ^/composer.phar
|
|
|
|
RedirectMatch 403 ^/env.php.*?$
|
|
|
|
RedirectMatch 403 ^/Makefile
|
|
|
|
RedirectMatch 403 ^/package.json
|
|
|
|
RedirectMatch 403 ^/package-lock.json
|
|
|
|
RedirectMatch 403 ^/phpunit.xml
|
|
|
|
RedirectMatch 403 ^/webpack.mix.js
|
|
|
|
|
2017-12-24 00:15:18 +08:00
|
|
|
# Redirect Trailing Slashes If Not A Folder...
|
|
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
|
|
RewriteRule ^(.*)/$ /$1 [L,R=301]
|
2017-12-17 15:10:49 +08:00
|
|
|
|
2017-12-24 00:15:18 +08:00
|
|
|
# Handle Front Controller...
|
|
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
|
|
RewriteCond %{REQUEST_FILENAME} !-f
|
|
|
|
RewriteRule ^ index.php [L]
|
2017-12-17 15:10:49 +08:00
|
|
|
|
2017-12-24 00:15:18 +08:00
|
|
|
# Handle Authorization Header
|
|
|
|
RewriteCond %{HTTP:Authorization} .
|
|
|
|
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
|