# Use the front controller as index file. It serves as a fallback solution when

[0] Fix | Delete

# every other rewrite/redirect fails (e.g. in an aliased environment without

[1] Fix | Delete

# mod_rewrite). Additionally, this reduces the matching process for the

[2] Fix | Delete

# start page (path "/") because otherwise Apache will apply the rewriting rules

[3] Fix | Delete

# to each configured DirectoryIndex file (e.g. index.php, index.html, index.pl).

[4] Fix | Delete

#DirectoryIndex index.php

[5] Fix | Delete

[6] Fix | Delete

<IfModule mod_rewrite.c>

[7] Fix | Delete

RewriteEngine On

[8] Fix | Delete

[9] Fix | Delete

# Set Authorization header for OAuth2 for when php is running under fcgi

[10] Fix | Delete

RewriteCond %{HTTP:Authorization} .+

[11] Fix | Delete

RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

[12] Fix | Delete

[13] Fix | Delete

# Determine the RewriteBase automatically and set it as environment variable.

[14] Fix | Delete

# If you are using Apache aliases to do mass virtual hosting or installed the

[15] Fix | Delete

# project in a subdirectory, the base path will be prepended to allow proper

[16] Fix | Delete

# resolution of the app.php file and to redirect to the correct URI. It will

[17] Fix | Delete

# work in environments without path prefix as well, providing a safe, one-size

[18] Fix | Delete

# fits all solution. But as you do not need it in this case, you can comment

[19] Fix | Delete

# the following 2 lines to eliminate the overhead.

[20] Fix | Delete

RewriteCond %{REQUEST_URI}::$1 ^(/.+)/(.*)::\2$

[21] Fix | Delete

RewriteRule ^(.*) - [E=BASE:%1]

[22] Fix | Delete

[23] Fix | Delete

# Redirect to URI without front controller to prevent duplicate content

[24] Fix | Delete

# (with and without `/app.php`). Only do this redirect on the initial

[25] Fix | Delete

# rewrite by Apache and not on subsequent cycles. Otherwise we would get an

[26] Fix | Delete

# endless redirect loop (request -> rewrite to front controller ->

[27] Fix | Delete

# redirect -> request -> ...).

[28] Fix | Delete

# So in case you get a "too many redirects" error or you always get redirected

[29] Fix | Delete

# to the start page because your Apache does not expose the REDIRECT_STATUS

[30] Fix | Delete

# environment variable, you have 2 choices:

[31] Fix | Delete

# - disable this feature by commenting the following 2 lines or

[32] Fix | Delete

# - use Apache >= 2.3.9 and replace all L flags by END flags and remove the

[33] Fix | Delete

# following RewriteCond (best solution)

[34] Fix | Delete

RewriteCond %{ENV:REDIRECT_STATUS} ^$

[35] Fix | Delete

RewriteRule ^index\.php(/(.*)|$) %{ENV:BASE}/$2 [R=301,L]

[36] Fix | Delete

[37] Fix | Delete

# If the requested filename exists, simply serve it.

[38] Fix | Delete

# We only want to let Apache serve files and not directories.

[39] Fix | Delete

RewriteCond %{REQUEST_FILENAME} -f

[40] Fix | Delete

RewriteRule .? - [L]

[41] Fix | Delete

[42] Fix | Delete

# Rewrite all other queries to the front controller.

[43] Fix | Delete

RewriteRule .? %{ENV:BASE}/index.php [L]

[44] Fix | Delete

</IfModule>

[45] Fix | Delete

[46] Fix | Delete

<IfModule !mod_rewrite.c>

[47] Fix | Delete

<IfModule mod_alias.c>

[48] Fix | Delete

# When mod_rewrite is not available, we instruct a temporary redirect of

[49] Fix | Delete

# the start page to the front controller explicitly so that the website

[50] Fix | Delete

# and the generated links can still be used.

[51] Fix | Delete

RedirectMatch 302 ^(?!/(index\.php|app|addons|plugins|media|upgrade))(/(.*))$ /index.php$2

[52] Fix | Delete

# RedirectTemp cannot be used instead

[53] Fix | Delete

</IfModule>

[54] Fix | Delete

</IfModule>

[55] Fix | Delete

[56] Fix | Delete

<IfModule mod_php5.c>

[57] Fix | Delete

# @link https://github.com/mautic/mautic/issues/1504

[58] Fix | Delete

php_value always_populate_raw_post_data -1

[59] Fix | Delete

</IfModule>

[60] Fix | Delete

[61] Fix | Delete

<IfModule mod_deflate.c>

[62] Fix | Delete

<IfModule mod_filter.c>

[63] Fix | Delete

AddOutputFilterByType DEFLATE application/javascript

[64] Fix | Delete

AddOutputFilterByType DEFLATE application/rss+xml

[65] Fix | Delete

AddOutputFilterByType DEFLATE application/vnd.ms-fontobject

[66] Fix | Delete

AddOutputFilterByType DEFLATE application/x-font

[67] Fix | Delete

AddOutputFilterByType DEFLATE application/x-font-opentype

[68] Fix | Delete

AddOutputFilterByType DEFLATE application/x-font-otf

[69] Fix | Delete

AddOutputFilterByType DEFLATE application/x-font-truetype

[70] Fix | Delete

AddOutputFilterByType DEFLATE application/x-font-ttf

[71] Fix | Delete

AddOutputFilterByType DEFLATE application/x-javascript

[72] Fix | Delete

AddOutputFilterByType DEFLATE font/opentype

[73] Fix | Delete

AddOutputFilterByType DEFLATE font/otf

[74] Fix | Delete

AddOutputFilterByType DEFLATE font/ttf

[75] Fix | Delete

AddOutputFilterByType DEFLATE image/svg+xml

[76] Fix | Delete

AddOutputFilterByType DEFLATE image/x-icon

[77] Fix | Delete

AddOutputFilterByType DEFLATE text/css

[78] Fix | Delete

AddOutputFilterByType DEFLATE text/javascript

[79] Fix | Delete

# Do not enable compression for file types that could contain secrets

[80] Fix | Delete

#AddOutputFilterByType DEFLATE text/html

[81] Fix | Delete

#AddOutputFilterByType DEFLATE text/plain

[82] Fix | Delete

#AddOutputFilterByType DEFLATE text/xml

[83] Fix | Delete

#AddOutputFilterByType DEFLATE application/xhtml+xml

[84] Fix | Delete

#AddOutputFilterByType DEFLATE application/xml

[85] Fix | Delete

#AddOutputFilterByType DEFLATE application/json

[86] Fix | Delete

<IfModule mod_setenvif.c>

[87] Fix | Delete

<IfModule mod_header.c>

[88] Fix | Delete

# Remove browser bugs (only needed for really old browsers)

[89] Fix | Delete

BrowserMatch ^Mozilla/4 gzip-only-text/html

[90] Fix | Delete

BrowserMatch ^Mozilla/4\.0[678] no-gzip

[91] Fix | Delete

BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

[92] Fix | Delete

Header append Vary User-Agent

[93] Fix | Delete

</IfModule>

[94] Fix | Delete

</IfModule>

[95] Fix | Delete

</IfModule>

[96] Fix | Delete

</IfModule>

[97] Fix | Delete

[98] Fix | Delete

# Apache 2.4+

[99] Fix | Delete

<IfModule authz_core_module>

[100] Fix | Delete

# Deny access via HTTP requests to all PHP files.

[101] Fix | Delete

<FilesMatch "\.php$">

[102] Fix | Delete

Require all denied

[103] Fix | Delete

</FilesMatch>

[104] Fix | Delete

[105] Fix | Delete

# Deny access via HTTP requests to composer files.

[106] Fix | Delete

<FilesMatch "^(composer\.json|composer\.lock)$">

[107] Fix | Delete

Require all denied

[108] Fix | Delete

</FilesMatch>

[109] Fix | Delete

[110] Fix | Delete

# Except those allowed below.

[111] Fix | Delete

<If "%{REQUEST_URI} =~ m#^[[relativeurl]]/(index|upgrade/upgrade)\.php#">

[112] Fix | Delete

Require all granted

[113] Fix | Delete

</If>

[114] Fix | Delete

</IfModule>

[115] Fix | Delete

[116] Fix | Delete

# Fallback for Apache < 2.4

[117] Fix | Delete

<IfModule !authz_core_module>

[118] Fix | Delete

# Deny access via HTTP requests to all PHP files.

[119] Fix | Delete

<FilesMatch "\.php$">

[120] Fix | Delete

Order deny,allow

[121] Fix | Delete

Deny from all

[122] Fix | Delete

</FilesMatch>

[123] Fix | Delete

[124] Fix | Delete

# Deny access via HTTP requests to composer files

[125] Fix | Delete

<FilesMatch "^(composer\.json|composer\.lock)$">

[126] Fix | Delete

Order deny,allow

[127] Fix | Delete

Deny from all

[128] Fix | Delete

</FilesMatch>

[129] Fix | Delete

[130] Fix | Delete

# Except those allowed below.

[131] Fix | Delete

<If "%{REQUEST_URI} =~ m#^/(index|upgrade/upgrade)\.php#">

[132] Fix | Delete

Order allow,deny

[133] Fix | Delete

Allow from all

[134] Fix | Delete

</If>

[135] Fix | Delete

</IfModule>

[136] Fix | Delete

[137] Fix | Delete

[138] Fix | Delete