# Turn off all options we don't need.

[0] Fix | Delete

Options None

[1] Fix | Delete

Options +FollowSymLinks

[2] Fix | Delete

[3] Fix | Delete

# Set the catch-all handler to prevent scripts from being executed.

[4] Fix | Delete

SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006

[5] Fix | Delete

<Files *>

[6] Fix | Delete

# Override the handler again if we're run later in the evaluation list.

[7] Fix | Delete

SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003

[8] Fix | Delete

</Files>

[9] Fix | Delete

[10] Fix | Delete

# If we know how to do it safely, disable the PHP engine entirely.

[11] Fix | Delete

<IfModule mod_php5.c>

[12] Fix | Delete

php_flag engine off

[13] Fix | Delete

</IfModule>

[14] Fix | Delete

<IfModule mod_php7.c>

[15] Fix | Delete

php_flag engine off

[16] Fix | Delete

</IfModule>

[17] Fix | Delete

# From PHP 8 there is no number in the module name.

[18] Fix | Delete

<IfModule mod_php.c>

[19] Fix | Delete

php_flag engine off

[20] Fix | Delete

</IfModule>

[21] Fix | Delete