Drop MultiViews by default (it's confusing for many people using rewrites with QSA...

[packages/apache.git] / apache-common.conf

diff --git a/apache-common.conf b/apache-common.conf
index 6ffd6349663fc2d16ef26f96e6ec9c5eee3a5b05..085c5e7ef242e475e2b4aa970cbc154e200d5737 100644 (file)
--- a/apache-common.conf
+++ b/apache-common.conf
@@ -27,7 +27,8 @@ DocumentRoot "/home/services/httpd/html"
 # Prevent access to:
 # - .htaccess and .htpasswd files
 # - backup files from being viewed
-<FilesMatch  "^(\.ht.*|.*~|.*,v)$">
+# - PHP's .user.ini
+<FilesMatch  "^(\.ht.*|\.user\.ini|.*~|.*,v)$">
        <IfModule mod_authz_host.c>
                Require all denied
        </IfModule>
@@ -39,7 +40,7 @@ DocumentRoot "/home/services/httpd/html"
 
 # Prevent access to:
 # - version control directories
-<DirectoryMatch "/\.(svn|git|hg|bzr)|CVS)/?">
+<DirectoryMatch "/(\.(svn|git|hg|bzr)|CVS)/?">
        <IfModule mod_authz_host.c>
                Require all denied
        </IfModule>