aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2019-11-25 22:00:31 +0100
committerMarc Alexander <admin@m-a-styles.de>2019-11-25 22:00:31 +0100
commit7b70984ef3bcbe4dced1a3ad5fa3ddc2d11c6d62 (patch)
tree022f754e77b68964f16cbac91ff1816b54601cb7
parenta8e2f4256b0f1330db8eb799bb26624cf185c6d4 (diff)
downloadforums-7b70984ef3bcbe4dced1a3ad5fa3ddc2d11c6d62.tar
forums-7b70984ef3bcbe4dced1a3ad5fa3ddc2d11c6d62.tar.gz
forums-7b70984ef3bcbe4dced1a3ad5fa3ddc2d11c6d62.tar.bz2
forums-7b70984ef3bcbe4dced1a3ad5fa3ddc2d11c6d62.tar.xz
forums-7b70984ef3bcbe4dced1a3ad5fa3ddc2d11c6d62.zip
[ticket/16226] Prevent Apache servers from using MultiViews
PHPBB3-16226
-rw-r--r--phpBB/.htaccess7
1 files changed, 7 insertions, 0 deletions
diff --git a/phpBB/.htaccess b/phpBB/.htaccess
index 53bce762ea..0be28ab670 100644
--- a/phpBB/.htaccess
+++ b/phpBB/.htaccess
@@ -36,6 +36,13 @@ RewriteRule ^(.*)$ app.php [QSA,L]
#Options +FollowSymLinks
</IfModule>
+# Apache content negotation tries to interpret non-existent paths as files if
+# MultiViews is enabled. This will however cause issues with paths containg
+# dots, e.g. for the cron tasks
+<IfModule mod_negotiation.c>
+ Options -MultiViews
+</IfModule>
+
# With Apache 2.4 the "Order, Deny" syntax has been deprecated and moved from
# module mod_authz_host to a new module called mod_access_compat (which may be
# disabled) and a new "Require" syntax has been introduced to mod_authz_host.