Add AcceptPathInfo Off in order to disable access to myfile.php/something

4 years ago · 4c36bbc833
parent bb3e4b149d
commit 4c36bbc833
1 changed files with 3 additions and 1 deletions
--- a/.htaccess
+++ b/.htaccess
@ -8,6 +8,9 @@

 RewriteEngine on

+# Disables access to myfile.php/something
+AcceptPathInfo Off
+
 # Prevent execution of PHP from directories used for different types of uploads
 RedirectMatch 403 ^/app/(?!courses/proxy)(cache|courses|home|logs|upload|Resources/public/css)/.*\.ph(p[3457]?|t|tml|ar)$
 RedirectMatch 403 ^/main/default_course_document/images/.*\.ph(p[3457]?|t|tml|ar)$
@ -88,4 +91,3 @@ AddType application/font-woff .woff .woff2
  ExpiresActive On
  ExpiresByType application/font-woff "access plus 1 month"
 </IfModule>
-