Same name and namespace in other branches
  1. 7.x includes/file.inc \file_htaccess_lines()
  2. 8.9.x core/includes/file.inc \file_htaccess_lines()

Returns the standard .htaccess lines that Drupal writes to file directories.

Return value

A string representing the desired contents of the .htaccess file.

See also

file_create_htaccess()

Related topics

1 call to file_htaccess_lines()
file_create_htaccess in includes/file.inc
Creates a .htaccess file in the given directory.

File

includes/file.inc, line 184
API for handling file uploads and server file management.

Code

function file_htaccess_lines() {
  $lines = <<<EOF
# Turn off all options we don't need.
Options None
Options +FollowSymLinks

# Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
<Files *>
  # Override the handler again if we're run later in the evaluation list.
  SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
</Files>

# If we know how to do it safely, disable the PHP engine entirely.
<IfModule mod_php5.c>
  php_flag engine off
</IfModule>
# PHP 4, Apache 1.
<IfModule mod_php4.c>
  php_flag engine off
</IfModule>
# PHP 4, Apache 2.
<IfModule sapi_apache2.c>
  php_flag engine off
</IfModule>
EOF;
  return $lines;
}