Joomla master .htaccess - differences 2.4.4 - 3.1.l (r)

Based on the version 2.3 code originally found at: http://snipt.net/nikosdion/the-master-htaccess/ and now listed at: http://code.google.com/p/joomla-master-htaccess/source/browse/trunk/joomla-master-htaccess.txt?spec=svn2&r=2

The original file contains a number of syntax errors, several rules that can never work, and a number of expressions that can be more efficiently coded.

Bugs and enhancements originally discussed at: http://forum.joomla.org/viewtopic.php?f=432&t=549841

Discussion also at: http://snipt.net/nikosdion/the-master-htaccess/ and http://snipt.net/g1smd/joomla-patch/

The new 2.4.4 proposed file: http://snipt.net/g1smd/joomla-master-htaccess-file-proposed-v24-2011-04-07/  \[404]\ or at: http://code.google.com/p/joomla-master-htaccess/source/browse/trunk/joomla-master-htaccess.txt?spec=svn4&r=20

NOTE: this is not now the latest version of the file.

Continued in: http://codereview.appspot.com/4314051/

[g1smd, 2011-04-10 00:00:18]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (left):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldcode4
joomla-master-htaccess.txt:4: ## Version 3.1 - March 29th, 2010
2011.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:228: ## Note: Replace [L=301,R] with [L,R] if you get
error 500.
[L=301,R] -> [R=301,L]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:230: # RewriteCond %{HTTP_HOST}
^(www\.)?olddomain\.com [NC]
Trailing space.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:365: # RewriteRule
^(components|modules|plugins|templates)/([^/]+/)*(index\.php)? - [F]
[F] should be [L] I think.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:374: RewriteRule ^[^/]+\.php$ - [F]
/ should be .

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:410: RewriteCond %{REQUEST_URI} !^/index.php
. -> \.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:416: # and the requested path and file doesn't match
a physical folder
Folder doesn't match a file.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (right):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newcode4
joomla-master-htaccess.txt:4: ## Version 2.4 (proposed) - April 7th, 2010
2011.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:262: RewriteCond %{QUERY_STRING}
[a-zA-Z0-9_]=(\.\.//?)+ [OR]
//? is one or two slashes

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:263: RewriteCond %{QUERY_STRING}
[a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC]
//? is one or two slashes

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:352: # RewriteRule
^(components|modules|plugins|templates)/([^/]+/)*(index\.php)?$ - [L]
Add $.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:364: RewriteRule
^(htaccess\.txt|configuration\.php(-dist)?|php\.ini)$ - [F]
Matches several extra filenames to block.

[g1smd, 2011-04-10 08:44:34]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (left):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:110: ## Suit to taste.
No longer needed.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (right):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:361: RewriteRule ^[^.]+\.php$ - [F]
Alternatively:
RewriteRule ^([^/]+/)*[^.]+\.php$ - [F]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:398: RewriteCond %{REQUEST_URI} !^/index\.php
Escape the literal period.

[g1smd, 2011-04-10 16:52:50]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (left):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:374: RewriteRule ^[^/]+\.php$ - [F]
[^/]+ may well accidentally "consume" the ".php" part. Perhaps: RewriteRule
^[^/.]+\.php$ - [F]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (right):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:361: RewriteRule ^[^.]+\.php$ - [F]
Is this meant to be "root only" or what?  Perhaps:
RewriteRule ^[^/.]+\.php$ - [F]

[g1smd, 2011-05-14 16:32:31]

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (left):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#oldco...
joomla-master-htaccess.txt:368: # RewriteRule ^templates/([^.]+)\.php$ - [L]
The backreference is not required.

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt
File joomla-master-htaccess.txt (right):

http://codereview.appspot.com/4370051/diff/3/joomla-master-htaccess.txt#newco...
joomla-master-htaccess.txt:363: ## Disallow access to htaccess.txt,
configuration.php, configuration.php-dist and php.ini
... and php.ini