# Disable directory listing

Options -Indexes



# Force utf-8 charset

AddDefaultCharset UTF-8

AddCharset UTF-8 .html .css .js .svg .woff .woff2



# Security

ServerSignature Off



# Protect .htaccess file

<Files .htaccess>

 Require all denied

</Files>



# Protect config.php

<Files config.php>

 Require all denied

</Files>



# Protect fusion_error_log.log

<Files fusion_error_log.log>

 Require all denied

</Files>



# Protect .cache files

<Files *.cache>

 Order allow,deny

 deny from all

</Files>



<ifModule mod_headers.c>

 Header set X-Content-Type-Options "nosniff"

</ifModule>



ErrorDocument 401 /error.php?code=401

ErrorDocument 403 /error.php?code=403

ErrorDocument 404 /error.php?code=404

# Options +SymLinksIfOwnerMatch <------- I turned this line off

<ifModule mod_rewrite.c>

 # Let PHP know mod_rewrite is enabled

 <ifModule mod_env.c>

 SetEnv MOD_REWRITE On

 </ifModule>

 RewriteEngine On

 RewriteBase /

 # Fix Apache internal dummy connections from breaking [(site_url)] cache

 RewriteCond %{HTTP_USER_AGENT} ^.*internal dummy connection.*$ [NC]

 RewriteRule .* - [F,L]

 # Exclude /administration and /themes directories and images from rewrite rules

 RewriteRule ^(administration|themes)/*$ - [L]

 RewriteCond %{REQUEST_FILENAME} !-f

 RewriteCond %{REQUEST_FILENAME} !-d

 RewriteCond %{REQUEST_FILENAME} !-l

 RewriteCond %{REQUEST_URI} !^/(administration|config|index.php)

 RewriteRule ^(.*?)$ index.php [L]

</ifModule>