Spartabots htaccess

# This is a comment
# spartabots.co.cc


# Not sure what this does (but leave this alone)
IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*


# Enable better indexing in folders
IndexOptions FancyIndexing
IndexOptions FoldersFirst
IndexOptions NameWidth=*

# Remove www from urls
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP_HOST} ^www.spartabots.co.cc [NC]
RewriteRule ^(.*)$ http://spartabots.co.cc/$1 [L,R=301]

# Compress files
AddOutputFilterByType DEFLATE text/plain
AddOutputFilterByType DEFLATE text/html
AddOutputFilterByType DEFLATE text/xml
AddOutputFilterByType DEFLATE text/css
AddOutputFilterByType DEFLATE application/xml
AddOutputFilterByType DEFLATE rss+xml
AddOutputFilterByType DEFLATE application/javascript
AddOutputFilterByType DEFLATE application/x-javascript


# Cache-Control Headers
# Ages in seconds.
<filesMatch "\.(ico|jpe?g|png|gif|swf)$">
Header set Cache-Control max-age=2592000
</filesMatch>
<filesMatch "\.(js)$">
Header set Cache-Control max-age=604800
</filesMatch>
<filesMatch "\.(css|html|php)$">
Header set Cache-Control max-age=43200
</filesMatch>


# Error documents
ErrorDocument 403 /errors/403.php
ErrorDocument 404 /errors/404.php
ErrorDocument 418 /errors/418.php
ErrorDocument 500 /errors/500.php


# Enable server side includes for html
AddHandler server-parsed .html
AddHandler server-parsed .shtml
Options Indexes FollowSymLinks Includes


# Force browser to download and not simply view these files
AddType application/octet-stream .doc
AddType application/octet-stream .docx
AddType application/octet-stream .rtf
AddType application/octet-stream .wpd
AddType application/octet-stream .txt
AddType application/octet-stream .pdf
AddType application/octet-stream .midi
AddType application/octet-stream .mp3
AddType application/octet-stream .pps
AddType application/octet-stream .ppt
AddType application/octet-stream .pptx
AddType application/octet-stream .xlr
AddType application/octet-stream .xls
AddType application/octet-stream .xlsx
AddType application/octet-stream .exe
AddType application/octet-stream .jar


# Helps prevent hacks
RewriteEngine On

# proc/self/environ is bad
RewriteCond %{QUERY_STRING} proc/self/environ [OR]

# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]

# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]

# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]

# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]

# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2})

# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]


# Enable a few older IE browsers to use a newer Chrome framework
Header set X-UA-Compatible "IE-edge"

# Misc stuff
AddType application/atom+xml .atom
SetEnv SERVER_ADMIN admin@spartabots.co.cc


# Not sure what these do (but leave these alone)
<Limit GET POST>
order deny,allow
deny from all
allow from all
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>
AuthName spartabots.co.cc