diff -u b/.htaccess b/.htaccess --- b/.htaccess +++ b/.htaccess @@ -130,15 +130,13 @@ # Note: The following URI conditions are not anchored at the start (^), # because Drupal may be located in a subdirectory. To further improve # security, you can replace '!/' with '!^/'. - # To directly execute PHP files in a module or run another PHP application - # in the same directory, modify the following lines. # Allow access to PHP files in /core (like update.php or install.php): RewriteCond %{REQUEST_URI} !/core/[^/]*\.php$ # Allow access to test-specific PHP files: - RewriteCond %{REQUEST_URI} !/core/modules/system/tests/http.php$ - RewriteCond %{REQUEST_URI} !/core/modules/system/tests/https.php$ + RewriteCond %{REQUEST_URI} !/core/modules/system/tests/https?.php$ # Allow access to Statistics module's custom front controller. - # You may copy and adapt this rule for contributed and custom modules. + # Copy and adapt this rule to directly execute PHP files in contributed or + # custom modules or to run another PHP application in the same directory. RewriteCond %{REQUEST_URI} !/core/modules/statistics/statistics.php$ # Deny access to any other PHP files that do not match the rules above. RewriteRule "^.+/.*\.php$" - [F]