Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
drupal/.htaccess

49 lines
1.1 KiB
ApacheConf
Raw Normal View History

* Added the foundations to create customized error pages. http://beta.drop.org/foobar.php (The customized error pages need to be beautified.)
2000-05-28 09:23:56 +00:00
#
* Added extra PHP variables to .htaccess as discussed earlier this week.
2000-06-22 09:14:16 +00:00
# Apache/PHP/site settings:
* Added the foundations to create customized error pages. http://beta.drop.org/foobar.php (The customized error pages need to be beautified.)
2000-05-28 09:23:56 +00:00
#
# Archive feature:
Fixed a security flaw: .inc files can be read from the web including `config.inc' which contains the account information (login, password) to the MySQL database. Apache has now been setup to deny access to all *.inc files from the web.
2000-05-29 09:46:03 +00:00
<Files archive>
ForceType application/x-httpd-php
</Files>
# Protect .inc files:
# .inc files can be read from the web so make sure we keep it
# away from the casual prying eyes. Especially `config.inc'.
<Files *.inc>
sorry - small typoe
2000-05-29 09:46:35 +00:00
order deny,allow
Fixed a security flaw: .inc files can be read from the web including `config.inc' which contains the account information (login, password) to the MySQL database. Apache has now been setup to deny access to all *.inc files from the web.
2000-05-29 09:46:03 +00:00
deny from all
</Files>
* Added the foundations to create customized error pages. http://beta.drop.org/foobar.php (The customized error pages need to be beautified.)
2000-05-28 09:23:56 +00:00
* The CVS directories (automatically created by the CVS repository) can no longer be accessed from the web. Let's keep lurking eyes out. ;) * I'm still idling (except for these kind of tidbits) until Natrak commited the new user system. *evil grin*
2000-06-01 13:33:19 +00:00
# Protect CVS directories:
<Files *CVS>
order deny,allow
deny from all
</Files>
* Enhancement: protect the themes/-directory (and subdirectory) from prying eyes.
2000-06-05 16:10:47 +00:00
# Protect theme directories:
<Files *themes>
order deny,allow
deny from all
</Files>
* Added the foundations to create customized error pages. http://beta.drop.org/foobar.php (The customized error pages need to be beautified.)
2000-05-28 09:23:56 +00:00
# Customized server error messages:
ErrorDocument 400 /error.php
ErrorDocument 402 /error.php
ErrorDocument 403 /error.php
ErrorDocument 404 /error.php
ErrorDocument 500 /error.php
Changing the httpd conf so the sessions are stored longer and use DROPID as the cookie name :)
2000-06-03 09:20:45 +00:00
* Added extra PHP variables to .htaccess as discussed earlier this week.
2000-06-22 09:14:16 +00:00
# Overload PHP variables:
<IfModule mod_php4.c>
I just commit everything what was queued in my backlog: - Added a basic implementation of comment moderation - Updated and renamed my 2 themes: I removed redundant boxes and tried to work towards simplicity. - Disabled the other themes as they are broken (I gave you sufficent time to update them). - Removed redundant files. - Added security checks with regard to the usage of HTML tags.
2000-09-26 07:34:33 +00:00
php_value php_register_globals 1
php_value track_vars 1
php_value magic_quotes_gpc 1
php_value magic_quotes_runtime 0
php_value magic_quotes_sybase 0
Changelog --------- - improved the user information page. - improved the story submission page. - fixed comments score bug: '.00' --> 'x.00' - tried fixing the calendar wrapping - UnConeD, is it fixed now? - provided a link back to the submission queue after having voted for a story. - fixed comment subject bug (and security flaw) by replacing quotes by &quot;. - updated theme 'zaphod': fixed 2 bugs. - updated theme 'marvin': fixed 1 bug and improved the layout so things wrap (hopefully) better in Windows. - comments have by default no subject pre-set - if no subject is provided, the user is warned and when a comment eventually got submitted without a subject, a subject is composed using the x first characters of the comment's body. - improved comments on submit.php - corrected a typo in the FAQ. UnConeD ------- - replace 'article.php' by 'discussion.php' - comment() still uses old references to account.php: the parameters you supply to account.php does no longer hold. You have to update those links to the new syntax. - commentcontrol() is outdated - copy paste the one of theme 'marvin' and adjust it to your likings.
2000-10-02 07:32:17 +00:00
php_value session.auto_start 1
php_value session.cookie_lifetime 17280000
php_value session.gc_maxlifetime 17280000
* Added extra PHP variables to .htaccess as discussed earlier this week.
2000-06-22 09:14:16 +00:00
php_value session.name DROPID
</IfModule>