Apache prohibits parsing PHP

Apache prohibits parsing PHP

A directory to parse PHP, this is very useful, we do the site security, this use a lot of, such as some directories can upload files, in order to avoid uploading files have Trojans, so we prohibit the directory below the access to parse PHP.

<Directory/data/www/data>

Php_admin_flag Engice off

<filesmatch "(. *) PHP" >

Order Deny,allow

Deny from all

</filesmatch>

</Directory>

Description: Php_admin_flag engine off this statement is to prohibit the parsing of PHP control statements, but this configuration is not enough, because the user can still access the PHP file after configuration, but do not parse, but can download, the user download PHP files is not appropriate, So it is necessary to ban it.

This article from "12350027" blog, declined reprint!

Apache prohibits parsing PHP