Pastebin launched a little side project called VERYVIRAL.com, check it out ;-) Want more features on Pastebin? Sign Up, it's FREE!
Guest

htaccess query

By: a guest on Nov 12th, 2012  |  syntax: None  |  size: 21.23 KB  |  views: 53  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. # BEGIN WordPress
  2. <IfModule mod_rewrite.c>
  3. RewriteEngine On
  4. RewriteBase /
  5. RewriteRule ^index\.php$ - [L]
  6. RewriteCond %{REQUEST_FILENAME} !-f
  7. RewriteCond %{REQUEST_FILENAME} !-d
  8. RewriteRule . /index.php [L]
  9. </IfModule>
  10.  
  11. # END WordPress
  12.  
  13.  
  14. # BEGIN HTML5 Boilerplate
  15.  
  16. ###
  17. ### This contains the HTML5 Boilerplate .htaccess that can be found at:
  18. ###  github.com/h5bp/html5-boilerplate/blob/master/.htaccess
  19. ###
  20. ### Added:
  21. ###  Block access to access to WordPress files that reveal version information.
  22. ###
  23. ### Commented out by default:
  24. ###  Expires headers:      Use WP Super Cache or W3 Total Cache (unless using the H5BP build script)
  25. ###  ETag removal:         Use WP Super Cache or W3 Total Cache (unless using the H5BP build script)
  26. ###  Start rewrite engine: Handled by WordPress
  27. ###  Suppress/force www:   Handled by WordPress
  28. ###  Options -MultiViews:  Causes a server 500 error on most shared hosts
  29. ###  Custom 404 page:      Handled by WordPress
  30. ###
  31. ### Anytime you update this file the .htaccess file in the root of your
  32. ### WordPress install is automatically updated with the changes whenever
  33. ### the permalinks are flushed or set
  34. ###
  35.  
  36.  
  37. # ----------------------------------------------------------------------
  38. # Better website experience for IE users
  39. # ----------------------------------------------------------------------
  40.  
  41. # Force the latest IE version, in various cases when it may fall back to IE7 mode
  42. #  github.com/rails/rails/commit/123eb25#commitcomment-118920
  43. # Use ChromeFrame if it's installed for a better experience for the poor IE folk
  44.  
  45. <IfModule mod_headers.c>
  46.   Header set X-UA-Compatible "IE=Edge,chrome=1"
  47.   # mod_headers can't match by content-type, but we don't want to send this header on *everything*...
  48.   <FilesMatch "\.(js|css|gif|png|jpe?g|pdf|xml|oga|ogg|m4a|ogv|mp4|m4v|webm|svg|svgz|eot|ttf|otf|woff|ico|webp|appcache|manifest|htc|crx|oex|xpi|safariextz|vcf)$" >
  49.     Header unset X-UA-Compatible
  50.   </FilesMatch>
  51. </IfModule>
  52.  
  53.  
  54. # ----------------------------------------------------------------------
  55. # Cross-domain AJAX requests
  56. # ----------------------------------------------------------------------
  57.  
  58. # Serve cross-domain Ajax requests, disabled by default.
  59. # enable-cors.org
  60. # code.google.com/p/html5security/wiki/CrossOriginRequestSecurity
  61.  
  62. #  <IfModule mod_headers.c>
  63. #    Header set Access-Control-Allow-Origin "*"
  64. #  </IfModule>
  65.  
  66.  
  67. # ----------------------------------------------------------------------
  68. # CORS-enabled images (@crossorigin)
  69. # ----------------------------------------------------------------------
  70.  
  71. # Send CORS headers if browsers request them; enabled by default for images.
  72. # developer.mozilla.org/en/CORS_Enabled_Image
  73. # blog.chromium.org/2011/07/using-cross-domain-images-in-webgl-and.html
  74. # hacks.mozilla.org/2011/11/using-cors-to-load-webgl-textures-from-cross-domain-images/
  75. # wiki.mozilla.org/Security/Reviews/crossoriginAttribute
  76.  
  77. <IfModule mod_setenvif.c>
  78.   <IfModule mod_headers.c>
  79.     # mod_headers, y u no match by Content-Type?!
  80.     <FilesMatch "\.(gif|png|jpe?g|svg|svgz|ico|webp)$">
  81.       SetEnvIf Origin ":" IS_CORS
  82.       Header set Access-Control-Allow-Origin "*" env=IS_CORS
  83.     </FilesMatch>
  84.   </IfModule>
  85. </IfModule>
  86.  
  87.  
  88. # ----------------------------------------------------------------------
  89. # Webfont access
  90. # ----------------------------------------------------------------------
  91.  
  92. # Allow access from all domains for webfonts.
  93. # Alternatively you could only whitelist your
  94. # subdomains like "subdomain.example.com".
  95.  
  96. <IfModule mod_headers.c>
  97.   <FilesMatch "\.(ttf|ttc|otf|eot|woff|font.css)$">
  98.     Header set Access-Control-Allow-Origin "*"
  99.   </FilesMatch>
  100. </IfModule>
  101.  
  102.  
  103.  
  104. # ----------------------------------------------------------------------
  105. # Proper MIME type for all files
  106. # ----------------------------------------------------------------------
  107.  
  108.  
  109. # JavaScript
  110. #   Normalize to standard type (it's sniffed in IE anyways)
  111. #   tools.ietf.org/html/rfc4329#section-7.2
  112. AddType application/javascript         js jsonp
  113. AddType application/json               json
  114.  
  115. # Audio
  116. AddType audio/ogg                      oga ogg
  117. AddType audio/mp4                      m4a f4a f4b
  118.  
  119. # Video
  120. AddType video/ogg                      ogv
  121. AddType video/mp4                      mp4 m4v f4v f4p
  122. AddType video/webm                     webm
  123. AddType video/x-flv                    flv
  124.  
  125. # SVG
  126. #   Required for svg webfonts on iPad
  127. #   twitter.com/FontSquirrel/status/14855840545
  128. AddType     image/svg+xml              svg svgz
  129. AddEncoding gzip                       svgz
  130.  
  131. # Webfonts
  132. AddType application/vnd.ms-fontobject  eot
  133. AddType application/x-font-ttf         ttf ttc
  134. AddType font/opentype                  otf
  135. AddType application/x-font-woff        woff
  136.  
  137. # Assorted types
  138. AddType image/x-icon                        ico
  139. AddType image/webp                          webp
  140. AddType text/cache-manifest                 appcache manifest
  141. AddType text/x-component                    htc
  142. AddType application/xml                     rss atom xml rdf
  143. AddType application/x-chrome-extension      crx
  144. AddType application/x-opera-extension       oex
  145. AddType application/x-xpinstall             xpi
  146. AddType application/octet-stream            safariextz
  147. AddType application/x-web-app-manifest+json webapp
  148. AddType text/x-vcard                        vcf
  149. AddType application/x-shockwave-flash       swf
  150.  
  151.  
  152.  
  153. # ----------------------------------------------------------------------
  154. # Allow concatenation from within specific js and css files
  155. # ----------------------------------------------------------------------
  156.  
  157. # e.g. Inside of script.combined.js you could have
  158. #   <!--#include file="libs/jquery-1.5.0.min.js" -->
  159. #   <!--#include file="plugins/jquery.idletimer.js" -->
  160. # and they would be included into this single file.
  161.  
  162. # This is not in use in the boilerplate as it stands. You may
  163. # choose to name your files in this way for this advantage or
  164. # concatenate and minify them manually.
  165. # Disabled by default.
  166.  
  167. #<FilesMatch "\.combined\.js$">
  168. #  Options +Includes
  169. #  AddOutputFilterByType INCLUDES application/javascript application/json
  170. #  SetOutputFilter INCLUDES
  171. #</FilesMatch>
  172. #<FilesMatch "\.combined\.css$">
  173. #  Options +Includes
  174. #  AddOutputFilterByType INCLUDES text/css
  175. #  SetOutputFilter INCLUDES
  176. #</FilesMatch>
  177.  
  178.  
  179. # ----------------------------------------------------------------------
  180. # Gzip compression
  181. # ----------------------------------------------------------------------
  182.  
  183. <IfModule mod_deflate.c>
  184.  
  185.   # Force deflate for mangled headers developer.yahoo.com/blogs/ydn/posts/2010/12/pushing-beyond-gzipping/
  186.   <IfModule mod_setenvif.c>
  187.     <IfModule mod_headers.c>
  188.       SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
  189.       RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
  190.     </IfModule>
  191.   </IfModule>
  192.  
  193.   # HTML, TXT, CSS, JavaScript, JSON, XML, HTC:
  194.   <IfModule filter_module>
  195.     FilterDeclare   COMPRESS
  196.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $text/html
  197.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $text/css
  198.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $text/plain
  199.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $text/xml
  200.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $text/x-component
  201.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/javascript
  202.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/json
  203.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/xml
  204.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/xhtml+xml
  205.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/rss+xml
  206.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/atom+xml
  207.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/vnd.ms-fontobject
  208.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $image/svg+xml
  209.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $image/x-icon
  210.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $application/x-font-ttf
  211.     FilterProvider  COMPRESS  DEFLATE resp=Content-Type $font/opentype
  212.     FilterChain     COMPRESS
  213.     FilterProtocol  COMPRESS  DEFLATE change=yes;byteranges=no
  214.   </IfModule>
  215.  
  216.   <IfModule !mod_filter.c>
  217.     # Legacy versions of Apache
  218.     AddOutputFilterByType DEFLATE text/html text/plain text/css application/json
  219.     AddOutputFilterByType DEFLATE application/javascript
  220.     AddOutputFilterByType DEFLATE text/xml application/xml text/x-component
  221.     AddOutputFilterByType DEFLATE application/xhtml+xml application/rss+xml application/atom+xml
  222.     AddOutputFilterByType DEFLATE image/x-icon image/svg+xml application/vnd.ms-fontobject application/x-font-ttf font/opentype
  223.   </IfModule>
  224.  
  225. </IfModule>
  226.  
  227.  
  228. # ----------------------------------------------------------------------
  229. # Expires headers (for better cache control)
  230. # ----------------------------------------------------------------------
  231.  
  232. # These are pretty far-future expires headers.
  233. # They assume you control versioning with filename-based cache busting
  234. # Additionally, consider that outdated proxies may miscache
  235. #   www.stevesouders.com/blog/2008/08/23/revving-filenames-dont-use-querystring/
  236.  
  237. # If you don't use filenames to version, lower the CSS  and JS to something like
  238. #   "access plus 1 week" or so.
  239.  
  240. # <IfModule mod_expires.c>
  241. #   ExpiresActive on
  242.  
  243. # Perhaps better to whitelist expires rules? Perhaps.
  244. #   ExpiresDefault                          "access plus 1 month"
  245.  
  246. # cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5)
  247. #   ExpiresByType text/cache-manifest       "access plus 0 seconds"
  248.  
  249. # Your document html
  250. #   ExpiresByType text/html                 "access plus 0 seconds"
  251.  
  252. # Data
  253. #   ExpiresByType text/xml                  "access plus 0 seconds"
  254. #   ExpiresByType application/xml           "access plus 0 seconds"
  255. #   ExpiresByType application/json          "access plus 0 seconds"
  256.  
  257. # Feed
  258. #   ExpiresByType application/rss+xml       "access plus 1 hour"
  259. #   ExpiresByType application/atom+xml      "access plus 1 hour"
  260.  
  261. # Favicon (cannot be renamed)
  262. #   ExpiresByType image/x-icon              "access plus 1 week"
  263.  
  264. # Media: images, video, audio
  265. #   ExpiresByType image/gif                 "access plus 1 month"
  266. #   ExpiresByType image/png                 "access plus 1 month"
  267. #   ExpiresByType image/jpg                 "access plus 1 month"
  268. #   ExpiresByType image/jpeg                "access plus 1 month"
  269. #   ExpiresByType video/ogg                 "access plus 1 month"
  270. #   ExpiresByType audio/ogg                 "access plus 1 month"
  271. #   ExpiresByType video/mp4                 "access plus 1 month"
  272. #   ExpiresByType video/webm                "access plus 1 month"
  273.  
  274. # HTC files  (css3pie)
  275. #   ExpiresByType text/x-component          "access plus 1 month"
  276.  
  277. # Webfonts
  278. #   ExpiresByType application/x-font-ttf    "access plus 1 month"
  279. #   ExpiresByType font/opentype             "access plus 1 month"
  280. #   ExpiresByType application/x-font-woff   "access plus 1 month"
  281. #   ExpiresByType image/svg+xml             "access plus 1 month"
  282. #   ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
  283.  
  284. # CSS and JavaScript
  285. #   ExpiresByType text/css                  "access plus 1 year"
  286. #   ExpiresByType application/javascript    "access plus 1 year"
  287.  
  288. # </IfModule>
  289.  
  290.  
  291.  
  292. # ----------------------------------------------------------------------
  293. # ETag removal
  294. # ----------------------------------------------------------------------
  295.  
  296. # FileETag None is not enough for every server.
  297. # <IfModule mod_headers.c>
  298. #   Header unset ETag
  299. # </IfModule>
  300.  
  301. # Since we're sending far-future expires, we don't need ETags for
  302. # static content.
  303. #   developer.yahoo.com/performance/rules.html#etags
  304. # FileETag None
  305.  
  306.  
  307.  
  308. # ----------------------------------------------------------------------
  309. # Stop screen flicker in IE on CSS rollovers
  310. # ----------------------------------------------------------------------
  311.  
  312. # The following directives stop screen flicker in IE on CSS rollovers - in
  313. # combination with the "ExpiresByType" rules for images (see above). If
  314. # needed, un-comment the following rules.
  315.  
  316. # BrowserMatch "MSIE" brokenvary=1
  317. # BrowserMatch "Mozilla/4.[0-9]{2}" brokenvary=1
  318. # BrowserMatch "Opera" !brokenvary
  319. # SetEnvIf brokenvary 1 force-no-vary
  320.  
  321.  
  322.  
  323. # ----------------------------------------------------------------------
  324. # Cookie setting from iframes
  325. # ----------------------------------------------------------------------
  326.  
  327. # Allow cookies to be set from iframes (for IE only)
  328. # If needed, uncomment and specify a path or regex in the Location directive
  329.  
  330. # <IfModule mod_headers.c>
  331. #   Header set P3P "policyref=\"/w3c/p3p.xml\", CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\""
  332. # </IfModule>
  333.  
  334.  
  335.  
  336. # ----------------------------------------------------------------------
  337. # Start rewrite engine
  338. # ----------------------------------------------------------------------
  339.  
  340. # Turning on the rewrite engine is necessary for the following rules and features.
  341. # FollowSymLinks must be enabled for this to work.
  342. #
  343. # Some cloud hosting services require RewriteBase to be set: goo.gl/HOcPN
  344. # If using the h5bp in a subdirectory, use `RewriteBase /foo` instead where 'foo' is your directory.
  345.  
  346. # <IfModule mod_rewrite.c>
  347. #   Options +FollowSymlinks
  348. #   RewriteEngine On
  349. # # RewriteBase /
  350. # </IfModule>
  351.  
  352.  
  353.  
  354. # ----------------------------------------------------------------------
  355. # Suppress or force the "www." at the beginning of URLs
  356. # ----------------------------------------------------------------------
  357.  
  358. # The same content should never be available under two different URLs - especially not with and
  359. # without "www." at the beginning, since this can cause SEO problems (duplicate content).
  360. # That's why you should choose one of the alternatives and redirect the other one.
  361.  
  362. # By default option 1 (no "www.") is activated. Remember: Shorter URLs are sexier.
  363. # no-www.org/faq.php?q=class_b
  364.  
  365. # If you rather want to use option 2, just comment out all option 1 lines
  366. # and uncomment option 2.
  367. # IMPORTANT: NEVER USE BOTH RULES AT THE SAME TIME!
  368.  
  369. # ----------------------------------------------------------------------
  370.  
  371. # Option 1:
  372. # Rewrite "www.example.com -> example.com"
  373.  
  374. # <IfModule mod_rewrite.c>
  375. #   RewriteCond %{HTTPS} !=on
  376. #   RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
  377. #   RewriteRule ^ http://%1%{REQUEST_URI} [R=301,L]
  378. # </IfModule>
  379.  
  380. # ----------------------------------------------------------------------
  381.  
  382. # Option 2:
  383. # To rewrite "example.com -> www.example.com" uncomment the following lines.
  384. # Be aware that the following rule might not be a good idea if you
  385. # use "real" subdomains for certain parts of your website.
  386.  
  387. # <IfModule mod_rewrite.c>
  388. #   RewriteCond %{HTTPS} !=on
  389. #   RewriteCond %{HTTP_HOST} !^www\..+$ [NC]
  390. #   RewriteRule ^ http://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
  391. # </IfModule>
  392.  
  393.  
  394.  
  395. # ----------------------------------------------------------------------
  396. # Built-in filename-based cache busting
  397. # ----------------------------------------------------------------------
  398.  
  399. # If you're not using the build script to manage your filename version revving,
  400. # you might want to consider enabling this, which will route requests for
  401. # /css/style.20110203.css to /css/style.css
  402.  
  403. # To understand why this is important and a better idea than all.css?v1231,
  404. # read: github.com/h5bp/html5-boilerplate/wiki/cachebusting
  405.  
  406. # Uncomment to enable.
  407. # <IfModule mod_rewrite.c>
  408. #   RewriteCond %{REQUEST_FILENAME} !-f
  409. #   RewriteCond %{REQUEST_FILENAME} !-d
  410. #   RewriteRule ^(.+)\.(\d+)\.(js|css|png|jpg|gif)$ $1.$3 [L]
  411. # </IfModule>
  412.  
  413.  
  414.  
  415. # ----------------------------------------------------------------------
  416. # Prevent SSL cert warnings
  417. # ----------------------------------------------------------------------
  418.  
  419. # Rewrite secure requests properly to prevent SSL cert warnings, e.g. prevent
  420. # https://www.example.com when your cert only allows https://secure.example.com
  421. # Uncomment the following lines to use this feature.
  422.  
  423. # <IfModule mod_rewrite.c>
  424. #   RewriteCond %{SERVER_PORT} !^443
  425. #   RewriteRule ^ https://example-domain-please-change-me.com%{REQUEST_URI} [R=301,L]
  426. # </IfModule>
  427.  
  428.  
  429.  
  430. # ----------------------------------------------------------------------
  431. # Prevent 404 errors for non-existing redirected folders
  432. # ----------------------------------------------------------------------
  433.  
  434. # without -MultiViews, Apache will give a 404 for a rewrite if a folder of the same name does not exist
  435. #   e.g. /blog/hello : webmasterworld.com/apache/3808792.htm
  436.  
  437. # Options -MultiViews
  438.  
  439.  
  440.  
  441. # ----------------------------------------------------------------------
  442. # Custom 404 page
  443. # ----------------------------------------------------------------------
  444.  
  445. # You can add custom pages to handle 500 or 403 pretty easily, if you like.
  446. # If you are hosting your site in subdirectory, adjust this accordingly
  447. #    e.g. ErrorDocument 404 /subdir/404.html
  448. # ErrorDocument 404 /404.html
  449.  
  450.  
  451.  
  452. # ----------------------------------------------------------------------
  453. # UTF-8 encoding
  454. # ----------------------------------------------------------------------
  455.  
  456. # Use UTF-8 encoding for anything served text/plain or text/html
  457. AddDefaultCharset utf-8
  458.  
  459. # Force UTF-8 for a number of file formats
  460. AddCharset utf-8 .css .js .xml .json .rss .atom
  461.  
  462.  
  463.  
  464. # ----------------------------------------------------------------------
  465. # A little more security
  466. # ----------------------------------------------------------------------
  467.  
  468.  
  469. # Do we want to advertise the exact version number of Apache we're running?
  470. # Probably not.
  471. ## This can only be enabled if used in httpd.conf - It will not work in .htaccess
  472. # ServerTokens Prod
  473.  
  474.  
  475. # "-Indexes" will have Apache block users from browsing folders without a default document
  476. # Usually you should leave this activated, because you shouldn't allow everybody to surf through
  477. # every folder on your server (which includes rather private places like CMS system folders).
  478. <IfModule mod_autoindex.c>
  479.   Options -Indexes
  480. </IfModule>
  481.  
  482.  
  483. # Block access to "hidden" directories whose names begin with a period. This
  484. # includes directories used by version control systems such as Subversion or Git.
  485. <IfModule mod_rewrite.c>
  486.   RewriteCond %{SCRIPT_FILENAME} -d
  487.   RewriteCond %{SCRIPT_FILENAME} -f
  488.   RewriteRule "(^|/)\." - [F]
  489. </IfModule>
  490.  
  491.  
  492. # Block access to backup and source files
  493. # This files may be left by some text/html editors and
  494. # pose a great security danger, when someone can access them
  495. <FilesMatch "(\.(bak|config|sql|fla|psd|ini|log|sh|inc|swp|dist)|~)$">
  496.   Order allow,deny
  497.   Deny from all
  498.   Satisfy All
  499. </FilesMatch>
  500.  
  501.  
  502. # Block access to WordPress files that reveal version information.
  503. <FilesMatch "^(wp-config\.php|readme\.html|license\.txt)">
  504.   Order allow,deny
  505.   Deny from all
  506.   Satisfy All
  507. </FilesMatch>
  508.  
  509.  
  510. # If your server is not already configured as such, the following directive
  511. # should be uncommented in order to set PHP's register_globals option to OFF.
  512. # This closes a major security hole that is abused by most XSS (cross-site
  513. # scripting) attacks. For more information: http://php.net/register_globals
  514. #
  515. # IF REGISTER_GLOBALS DIRECTIVE CAUSES 500 INTERNAL SERVER ERRORS :
  516. #
  517. # Your server does not allow PHP directives to be set via .htaccess. In that
  518. # case you must make this change in your php.ini file instead. If you are
  519. # using a commercial web host, contact the administrators for assistance in
  520. # doing this. Not all servers allow local php.ini files, and they should
  521. # include all PHP configurations (not just this one), or you will effectively
  522. # reset everything to PHP defaults. Consult www.php.net for more detailed
  523. # information about setting PHP directives.
  524.  
  525. # php_flag register_globals Off
  526.  
  527. # Rename session cookie to something else, than PHPSESSID
  528. # php_value session.name sid
  529.  
  530. # Disable magic quotes (This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0.)
  531. # php_flag magic_quotes_gpc Off
  532.  
  533. # Do not show you are using PHP
  534. # Note: Move this line to php.ini since it won't work in .htaccess
  535. # php_flag expose_php Off
  536.  
  537. # Level of log detail - log all errors
  538. # php_value error_reporting -1
  539.  
  540. # Write errors to log file
  541. # php_flag log_errors On
  542.  
  543. # Do not display errors in browser (production - Off, development - On)
  544. # php_flag display_errors Off
  545.  
  546. # Do not display startup errors (production - Off, development - On)
  547. # php_flag display_startup_errors Off
  548.  
  549. # Format errors in plain text
  550. # Note: Leave this setting 'On' for xdebug's var_dump() output
  551. # php_flag html_errors Off
  552.  
  553. # Show multiple occurrence of error
  554. # php_flag ignore_repeated_errors Off
  555.  
  556. # Show same errors from different sources
  557. # php_flag ignore_repeated_source Off
  558.  
  559. # Size limit for error messages
  560. # php_value log_errors_max_len 1024
  561.  
  562. # Don't precede error with string (doesn't accept empty string, use whitespace if you need)
  563. # php_value error_prepend_string " "
  564.  
  565. # Don't prepend to error (doesn't accept empty string, use whitespace if you need)
  566. # php_value error_append_string " "
  567.  
  568. # Increase cookie security
  569. <IfModule php5_module>
  570.   php_value session.cookie_httponly true
  571. </IfModule>
  572.  
  573. # END HTML5 Boilerplate