|
@@ -5,26 +5,26 @@
|
|
|
CustomLog "|/bin/cat" combined
|
|
|
|
|
|
<Directory /app/code/>
|
|
|
- Options +FollowSymLinks
|
|
|
+ Options +FollowSymLinks -Indexes
|
|
|
AllowOverride All
|
|
|
Require all granted
|
|
|
</Directory>
|
|
|
|
|
|
- # some directories must be protected
|
|
|
- <Directory /app/code/wp-content>
|
|
|
+ <Directory /app/code/wp-content>
|
|
|
DirectoryIndex Off
|
|
|
AllowOverride None
|
|
|
<IfModule mod_php7.c>
|
|
|
php_admin_flag engine off
|
|
|
</IfModule>
|
|
|
- </Directory>
|
|
|
+ </Directory>
|
|
|
|
|
|
# many wp plugins have .htaccess in them to AllowOverride is All
|
|
|
# ARI adminer, social media plugins expose a "public" endpoint that requires us
|
|
|
# to allow PHP to be executed as a direct entry point (as opposed to being just included
|
|
|
# from wp core). So php_admin_flag is on
|
|
|
- <Directory /app/code/wp-content/plugins>
|
|
|
- DirectoryIndex Off
|
|
|
+ # Some plugins like Wordpress Social Login require index.php
|
|
|
+ <Directory /app/code/wp-content/plugins>
|
|
|
+ DirectoryIndex index.php
|
|
|
AllowOverride All
|
|
|
<IfModule mod_php7.c>
|
|
|
php_admin_flag engine on
|