# Disable multiviews (conflicts with /admin/plugin.php) and index (security) Options -MultiViews -Indexes DirectoryIndex disabled DirectoryIndex index.php index.html # Prevents access to these urls RedirectMatch 403 /include/ RedirectMatch 403 /templates/ RedirectMatch 403 ^/scripts/ RedirectMatch 403 /data/ RedirectMatch 403 /.*\.log RedirectMatch 403 /(README|VERSION|COPYING|Makefile|cron\.php) RedirectMatch 403 /config\.(.*)\.php RedirectMatch 403 /sous-domaine\.html RedirectMatch 403 _inc\.php # Assumes a reverse proxy provides https SetEnv HTTPS "on" SetEnv HTTP_X_FORWARDED_PROTO "https"