-
-
Save jdsimcoe/290cb78bab4f5183d720 to your computer and use it in GitHub Desktop.
Saplings HTACCESS
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# ---------------------------------------------------------------------- | |
# PHP Overrides | |
# ---------------------------------------------------------------------- | |
php_value upload_max_filesize 20M | |
php_value max_execution_time 1000M | |
php_value max_input_time 1000M | |
php_value memory_limit 1000M | |
# ---------------------------------------------------------------------- | |
# Better website experience for IE users | |
# ---------------------------------------------------------------------- | |
# Force the latest IE version, in various cases when it may fall back to IE7 mode | |
# github.com/rails/rails/commit/123eb25#commitcomment-118920 | |
# Use ChromeFrame if it's installed for a better experience for the poor IE folk | |
<IfModule mod_headers.c> | |
Header set X-UA-Compatible "IE=Edge,chrome=1" | |
# mod_headers can't match by content-type, but we don't want to send this header on *everything*... | |
<FilesMatch "\.(js|css|gif|png|jpe?g|pdf|xml|oga|ogg|m4a|ogv|mp4|m4v|webm|svg|svgz|eot|ttf|otf|woff|ico|webp|appcache|manifest|htc|crx|oex|xpi|safariextz|vcf)$" > | |
Header unset X-UA-Compatible | |
</FilesMatch> | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# CORS-enabled images (@crossorigin) | |
# ---------------------------------------------------------------------- | |
# Send CORS headers if browsers request them; enabled by default for images. | |
# developer.mozilla.org/en/CORS_Enabled_Image | |
# blog.chromium.org/2011/07/using-cross-domain-images-in-webgl-and.html | |
# hacks.mozilla.org/2011/11/using-cors-to-load-webgl-textures-from-cross-domain-images/ | |
# wiki.mozilla.org/Security/Reviews/crossoriginAttribute | |
<IfModule mod_setenvif.c> | |
<IfModule mod_headers.c> | |
# mod_headers, y u no match by Content-Type?! | |
<FilesMatch "\.(gif|png|jpe?g|svg|svgz|ico|webp)$"> | |
SetEnvIf Origin ":" IS_CORS | |
Header set Access-Control-Allow-Origin "*" env=IS_CORS | |
</FilesMatch> | |
</IfModule> | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# Webfont access | |
# ---------------------------------------------------------------------- | |
# Allow access from all domains for webfonts. | |
# Alternatively you could only whitelist your | |
# subdomains like "subdomain.example.com". | |
<IfModule mod_headers.c> | |
<FilesMatch "\.(ttf|ttc|otf|eot|woff|font.css)$"> | |
Header set Access-Control-Allow-Origin "*" | |
</FilesMatch> | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# Proper MIME type for all files | |
# ---------------------------------------------------------------------- | |
# JavaScript | |
# Normalize to standard type (it's sniffed in IE anyways) | |
# tools.ietf.org/html/rfc4329#section-7.2 | |
AddType application/javascript js | |
# Audio | |
AddType audio/ogg oga ogg | |
AddType audio/mp4 m4a | |
# Video | |
AddType video/ogg ogv | |
AddType video/mp4 mp4 m4v | |
AddType video/webm webm | |
# SVG | |
# Required for svg webfonts on iPad | |
# twitter.com/FontSquirrel/status/14855840545 | |
AddType image/svg+xml svg svgz | |
AddEncoding gzip svgz | |
# Webfonts | |
AddType application/vnd.ms-fontobject eot | |
AddType application/x-font-ttf ttf ttc | |
AddType font/opentype otf | |
AddType application/x-font-woff woff | |
# Assorted types | |
AddType image/x-icon ico | |
AddType image/webp webp | |
AddType text/cache-manifest appcache manifest | |
AddType text/x-component htc | |
AddType application/x-chrome-extension crx | |
AddType application/x-opera-extension oex | |
AddType application/x-xpinstall xpi | |
AddType application/octet-stream safariextz | |
AddType application/x-web-app-manifest+json webapp | |
AddType text/x-vcard vcf | |
# ---------------------------------------------------------------------- | |
# Gzip compression | |
# ---------------------------------------------------------------------- | |
<IfModule mod_deflate.c> | |
# Force deflate for mangled headers developer.yahoo.com/blogs/ydn/posts/2010/12/pushing-beyond-gzipping/ | |
<IfModule mod_setenvif.c> | |
<IfModule mod_headers.c> | |
SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding | |
RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding | |
</IfModule> | |
</IfModule> | |
# HTML, TXT, CSS, JavaScript, JSON, XML, HTC: | |
<IfModule filter_module> | |
FilterDeclare COMPRESS | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $text/html | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $text/css | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $text/plain | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $text/xml | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $text/x-component | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/javascript | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/json | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/xml | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/xhtml+xml | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/rss+xml | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/atom+xml | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/vnd.ms-fontobject | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $image/svg+xml | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $image/x-icon | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $application/x-font-ttf | |
FilterProvider COMPRESS DEFLATE resp=Content-Type $font/opentype | |
FilterChain COMPRESS | |
FilterProtocol COMPRESS DEFLATE change=yes;byteranges=no | |
</IfModule> | |
<IfModule !mod_filter.c> | |
# Legacy versions of Apache | |
AddOutputFilterByType DEFLATE text/html text/plain text/css application/json | |
AddOutputFilterByType DEFLATE application/javascript | |
AddOutputFilterByType DEFLATE text/xml application/xml text/x-component | |
AddOutputFilterByType DEFLATE application/xhtml+xml application/rss+xml application/atom+xml | |
AddOutputFilterByType DEFLATE image/x-icon image/svg+xml application/vnd.ms-fontobject application/x-font-ttf font/opentype | |
</IfModule> | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# Expires headers (for better cache control) | |
# ---------------------------------------------------------------------- | |
# These are pretty far-future expires headers. | |
# They assume you control versioning with cachebusting query params like | |
# <script src="application.js?20100608"> | |
# Additionally, consider that outdated proxies may miscache | |
# www.stevesouders.com/blog/2008/08/23/revving-filenames-dont-use-querystring/ | |
# If you don't use filenames to version, lower the CSS and JS to something like | |
# "access plus 1 week" or so. | |
<IfModule mod_expires.c> | |
ExpiresActive on | |
# Perhaps better to whitelist expires rules? Perhaps. | |
ExpiresDefault "access plus 1 month" | |
# cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5) | |
ExpiresByType text/cache-manifest "access plus 0 seconds" | |
# Your document html | |
ExpiresByType text/html "access plus 0 seconds" | |
# Data | |
ExpiresByType text/xml "access plus 0 seconds" | |
ExpiresByType application/xml "access plus 0 seconds" | |
ExpiresByType application/json "access plus 0 seconds" | |
# Feed | |
ExpiresByType application/rss+xml "access plus 1 hour" | |
ExpiresByType application/atom+xml "access plus 1 hour" | |
# Favicon (cannot be renamed) | |
ExpiresByType image/x-icon "access plus 1 week" | |
# Media: images, video, audio | |
ExpiresByType image/gif "access plus 1 month" | |
ExpiresByType image/png "access plus 1 month" | |
ExpiresByType image/jpg "access plus 1 month" | |
ExpiresByType image/jpeg "access plus 1 month" | |
ExpiresByType video/ogg "access plus 1 month" | |
ExpiresByType audio/ogg "access plus 1 month" | |
ExpiresByType video/mp4 "access plus 1 month" | |
ExpiresByType video/webm "access plus 1 month" | |
# HTC files (css3pie) | |
ExpiresByType text/x-component "access plus 1 month" | |
# Webfonts | |
ExpiresByType application/x-font-ttf "access plus 1 month" | |
ExpiresByType font/opentype "access plus 1 month" | |
ExpiresByType application/x-font-woff "access plus 1 month" | |
ExpiresByType image/svg+xml "access plus 1 month" | |
ExpiresByType application/vnd.ms-fontobject "access plus 1 month" | |
# CSS and JavaScript | |
ExpiresByType text/css "access plus 1 year" | |
ExpiresByType application/javascript "access plus 1 year" | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# ETag removal | |
# ---------------------------------------------------------------------- | |
# FileETag None is not enough for every server. | |
<IfModule mod_headers.c> | |
Header unset ETag | |
</IfModule> | |
# Since we're sending far-future expires, we don't need ETags for | |
# static content. | |
# developer.yahoo.com/performance/rules.html#etags | |
FileETag None | |
# ---------------------------------------------------------------------- | |
# Suppress "www." at the beginning of URLs | |
# ---------------------------------------------------------------------- | |
# The same content should never be available under two different URLs - especially not with and | |
# without "www." at the beginning, since this can cause SEO problems (duplicate content). | |
# That's why you should choose one of the alternatives and redirect the other one. | |
# ---------------------------------------------------------------------- | |
# Option 1: | |
# Rewrite "www.example.com -> example.com" | |
<IfModule !mod_rewrite.c> | |
SetEnv HTTP_MOD_REWRITE No | |
</IfModule> | |
<IfModule mod_rewrite.c> | |
RewriteCond %{HTTPS} !=on | |
RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC] | |
RewriteRule ^ http://%1%{REQUEST_URI} [R=301,L] | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# Symphony 2.3.x | |
# ---------------------------------------------------------------------- | |
Options +FollowSymlinks -Indexes | |
<IfModule !mod_rewrite.c> | |
SetEnv HTTP_MOD_REWRITE No | |
</IfModule> | |
<IfModule mod_rewrite.c> | |
RewriteEngine on | |
RewriteBase / | |
Redirect /churches.php http://songsforsaplings.com/partnership/ | |
Redirect /language_info.php/ http://songsforsaplings.com/missions/ | |
Redirect /missions/french_info.php http://songsforsaplings.com/missions/french/ | |
Redirect /missions/chichewa_info.php http://songsforsaplings.com/missions/chichewa/ | |
Redirect /missions/poland_info.php http://dev.songsforsaplings.com/missions/polish/ | |
Redirect /missions/ukraine_info.php/ http://songsforsaplings.com/missions/ukrainian/ | |
Redirect /missions/spanish_info.php http://songsforsaplings.com/missions/spanish/ | |
### SECURITY - Protect crucial files | |
RewriteRule ^manifest/(.*)$ - [F] | |
RewriteRule ^workspace/utilities/(.*).xsl$ - [F] | |
RewriteRule ^workspace/pages/(.*).xsl$ - [F] | |
RewriteRule ^(.*).sql$ - [F] | |
RewriteRule (^|/)\. - [F] | |
### DO NOT APPLY RULES WHEN REQUESTING "favicon.ico" | |
RewriteCond %{REQUEST_FILENAME} favicon.ico [NC] | |
RewriteRule .* - [S=14] | |
### IMAGE RULES | |
RewriteRule ^image\/(.+\.(jpg|gif|jpeg|png|bmp))$ extensions/jit_image_manipulation/lib/image.php?param=$1 [L,NC] | |
### CHECK FOR TRAILING SLASH - Will ignore files | |
RewriteCond %{REQUEST_FILENAME} !-f | |
RewriteCond %{REQUEST_URI} !/$ | |
RewriteCond %{REQUEST_URI} !(.*)/$ | |
RewriteRule ^(.*)$ $1/ [L,R=301] | |
### URL Correction | |
RewriteRule ^(symphony/)?index.php(/.*/?) $1$2 [NC] | |
### ADMIN REWRITE | |
RewriteRule ^symphony\/?$ index.php?mode=administration&%{QUERY_STRING} [NC,L] | |
RewriteCond %{REQUEST_FILENAME} !-d | |
RewriteCond %{REQUEST_FILENAME} !-f | |
RewriteRule ^symphony(\/(.*\/?))?$ index.php?symphony-page=$1&mode=administration&%{QUERY_STRING} [NC,L] | |
### FRONTEND REWRITE - Will ignore files and folders | |
RewriteCond %{REQUEST_FILENAME} !-d | |
RewriteCond %{REQUEST_FILENAME} !-f | |
RewriteRule ^(.*\/?)$ index.php?symphony-page=$1&%{QUERY_STRING} [L] | |
</IfModule> | |
# ---------------------------------------------------------------------- | |
# Block Bad Bots | |
# ---------------------------------------------------------------------- | |
<IfModule !mod_rewrite.c> | |
SetEnv HTTP_MOD_REWRITE No | |
</IfModule> | |
<IfModule mod_rewrite.c> | |
RewriteEngine On | |
RewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Bot\ mailto:craftbot@yahoo.com [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Custo [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^DISCo [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Download\ Demon [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^eCatch [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Express\ WebPictures [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^GetRight [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Grafula [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^HMView [OR] | |
RewriteCond %{HTTP_USER_AGENT} HTTrack [NC,OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Image\ Stripper [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Image\ Sucker [OR] | |
RewriteCond %{HTTP_USER_AGENT} Indy\ Library [NC,OR] | |
RewriteCond %{HTTP_USER_AGENT} ^InterGET [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Internet\ Ninja [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^JetCar [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^JOC\ Web\ Spider [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^larbin [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Mass\ Downloader [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^MIDown\ tool [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Mister\ PiX [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Navroad [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^NearSite [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Net\ Vampire [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Octopus [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Offline\ Explorer [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Offline\ Navigator [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Papa\ Foto [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^pavuk [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^ReGet [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Teleport\ Pro [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Web\ Image\ Collector [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Web\ Sucker [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebGo\ IS [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Website\ eXtractor [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Website\ Quester [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebWhacker [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Wget [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Widow [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^Zeus | |
RewriteRule ^.* - [F,L] | |
</IfModule> | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment