Forum

private function add_hide_directory_listings()
{
$this->add_section('Hide directory listings');
$this->add_line('Options -Indexes');
$this->add_line('Options +FollowSymLinks');
$this->add_line('Options -Multiviews');
$this->add_section('Prevent viewing of .htaccess file');
$this->add_line('<Files .htaccess>');
$this->add_line('    # Apache ??? 2.3');
$this->add_line('    <IfModule mod_authz_core.c>');
$this->add_line('        Require all denied');
$this->add_line('    </IfModule>');
$this->add_line('    # Apache 2.2');
$this->add_line('    <IfModule !mod_authz_core.c>');
$this->add_line('        Order Allow,Deny');
$this->add_line('        Deny from all');
$this->add_line('    </IfModule>');
$this->add_line('</Files>');
}

private function add_hide_directory_listings()
{
$this->add_section('Hide directory listings');
$this->add_line('Options -Indexes');
$this->add_line('Options +FollowSymLinks');
$this->add_line('Options -Multiviews');
$this->add_section('Prevent viewing of .htaccess file');
$this->add_line('<Files .htaccess>');
$this->add_line('    order allow,deny');
$this->add_line('    deny from all');
$this->add_line('</Files>');
}

<?php
phpinfo();
?> 

 
<?php
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
class HtaccessFileCache implements CacheData
{
private $htaccess_file_content='';
private $general_config;
 
 
 
 
public function synchronize()
{
$this->htaccess_file_content='';
$this->general_config=GeneralConfig::load();
 
$this->add_free_php56();
 
$this->add_disable_signatures_protection();
 
$this->add_hide_directory_listings();
 
$this->add_server_protections();
 
$this->add_http_headers();
 
if(ServerEnvironmentConfig::load()->is_url_rewriting_enabled())
{
$this->enable_rewrite_rules();
 
$this->add_core_rules();
$this->add_modules_rules();
 
$this->add_php_and_http_protections();
 
$this->add_file_and_sql_injections_protections();
 
$this->force_https_if_available();
 
$this->add_bandwidth_protection();
 
$this->add_robots_protection();
}
 
$this->add_error_redirection();
 
$this->add_gzip_compression();
 
$this->add_expires_headers();
 
$this->disable_file_etags();
 
$this->add_manual_content();
 
$this->clean_file_content();
}
 
private function add_line($line)
{
$this->htaccess_file_content.="\n".$line;
}
 
private function add_empty_line()
{
$this->add_line('');
}
 
private function add_section($name)
{
$this->add_empty_line();
$this->add_line('# '.$name.' #');
}
 
private function get_domain($hostname)
{
preg_match("/[a-z0-9\-]{1,63}\.[a-z\.]{2,6}$/",parse_url($hostname,PHP_URL_HOST),$_domain_tld);
return isset($_domain_tld[0])?$_domain_tld[0]:'';
}
 
private function add_free_php56()
{
if($this->get_domain($this->general_config->get_site_url())=='free.fr')
{
$this->add_section('Enable PHP5.6 on '.$this->get_domain($this->general_config->get_site_url()).' hosting');
$this->add_line('php56 1');
}
}
 
private function add_disable_signatures_protection()
{
$this->add_section('Disable signatures protection');
$this->add_line('# Disable your Apache version number from showing up in HTTP headers for added security');
$this->add_line('<IfDefine !Free>');
$this->add_line('    <IfModule ModSecurity.c>');
$this->add_line('        ServerSignature Off');
$this->add_line('        SecServerSignature \'\'');
$this->add_line('    </IfModule>');
$this->add_line('</IfDefine>');
}
 
private function add_hide_directory_listings()
{
$this->add_section('Hide directory listings');
$this->add_line('Options -Indexes');
$this->add_line('Options +FollowSymLinks');
$this->add_line('Options -Multiviews');
$this->add_section('Prevent viewing of .htaccess file');
if($this->get_domain($this->general_config->get_site_url())=='free.fr')
{
$this->add_line('<Files .htaccess>');
$this->add_line('    Order Allow,Deny');
$this->add_line('    Deny from all');
$this->add_line('</Files>');
}
else{
$this->add_line('<Files .htaccess>');
$this->add_line('    # Apache ??? 2.3');
$this->add_line('    <IfModule mod_authz_core.c>');
$this->add_line('        Require all denied');
$this->add_line('    </IfModule>');
$this->add_line('    # Apache 2.2');
$this->add_line('    <IfModule !mod_authz_core.c>');
$this->add_line('        Order Allow,Deny');
$this->add_line('        Deny from all');
$this->add_line('    </IfModule>');
$this->add_line('</Files>');
}
}
 
private function add_server_protections()
{
$this->add_section('Server protection');
$this->add_line('<IfDefine !Free>');
$this->add_line('    <IfModule mod_access.c>');
$this->add_line('        # Do Not Track: Universal Third-Party Web Tracking Opt Out');
$this->add_line('        # http://datatracker.ietf.org/doc/draft-mayer-do-not-track/');
$this->add_line('        SetEnvIfNoCase DNT 1 DO_NOT_TRACK');
$this->add_empty_line();
$this->add_line('        # Protect against Apache HTTP Server Denial Of Service Vulnerability.  CVE-2011-3192');
$this->add_line('        SetEnvIf Range (,.*?){5,} bad-range=1');
$this->add_line('        RequestHeader unset Range env=bad-range');
$this->add_line('    </IfModule>');
$this->add_line('</IfDefine>');
}
 
private function add_http_headers()
{
$this->add_section('HTTP Headers');
$this->add_line('<IfDefine !Free>');
$this->add_line('    <IfModule mod_headers.c>');
$this->add_line('        # Enable keep-alive');
$this->add_line('        Header set Connection keep-alive');
$this->add_line('        # Disable your PHP version number from showing up in HTTP headers for added security.');
$this->add_line('        Header unset X-Powered-By');
 
if($this->general_config->is_site_url_https())
{
$this->add_line('        # Tell the browser to attempt the HTTPS version first');
$this->add_line('        Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"');
}
 
$this->add_line('        # Don\'t allow any pages to be framed externally - Defends against CSRF');
$this->add_line('        Header set X-Frame-Options SAMEORIGIN');
$this->add_line('        # Control Cross-Domain Policies');
$this->add_line('        Header set X-Permitted-Cross-Domain-Policies "master-only"');
$this->add_line('        # Turn on IE8-IE9 XSS prevention tools');
$this->add_line('        Header set X-XSS-Protection "1; mode=block"');
$this->add_line('        # Prevent mime based attacks');
$this->add_line('        Header set X-Content-Type-Options "nosniff"');
$this->add_line('        # Use this to force IE to hide that annoying browser compatibility button in the address bar.');
$this->add_line('        # IE=edge means IE should use the latest (edge) version of its rendering engine.');
$this->add_line('        # chrome=1 means IE should use the Chrome rendering engine if installed.');
$this->add_line('        BrowserMatch MSIE ie');
$this->add_line('        Header set X-UA-Compatible "IE=Edge"');
$this->add_line('        # Disable server signature');
$this->add_line('        Header set ServerSignature "Off"');
$this->add_line('        Header set ServerTokens "Prod"');
$this->add_line('    </IfModule>');
$this->add_line('</IfDefine>');
}
 
private function enable_rewrite_rules()
{
$this->add_section('Rewrite rules');
$this->add_line('RewriteEngine on');
$this->add_line('RewriteBase /');
}
 
private function add_core_rules()
{
$this->add_section('Core');
 
$this->add_rewrite_rule('^user/pm-?([0-9]+)-?([0-9]{0,})-?([0-9]{0,})-?([0-9]{0,})-?([a-z_]{0,})\.php$','user/pm.php?pm=$1&id=$2&p=$3&quote=$4');
 
$eps=AppContext::get_extension_provider_service();
$mappings=$eps->get_extension_point(UrlMappingsExtensionPoint::EXTENSION_POINT);
$authorized_extension_point=array('kernel','user');
foreach($mappings as $id=>$mapping_list)
{
if(in_array($id,$authorized_extension_point))
{
$this->add_url_mapping($mapping_list);
}
}
}
 
private function add_modules_rules()
{
$this->add_section('Modules rules');
 
$modules=ModulesManager::get_activated_modules_map();
$eps=AppContext::get_extension_provider_service();
foreach($modules as $module)
{
$id=$module->get_id();
$configuration=$module->get_configuration();
$rules=$configuration->get_url_rewrite_rules();
if(!empty($rules))
{
$this->add_section($id);
}
foreach($rules as $rule)
{
$this->add_line(str_replace('DIR',$this->general_config->get_site_path(),$rule));
}
if($eps->provider_exists($id,UrlMappingsExtensionPoint::EXTENSION_POINT))
{
$this->add_section($id);
$provider=$eps->get_provider($id);
$url_mappings=$provider->get_extension_point(UrlMappingsExtensionPoint::EXTENSION_POINT);
$this->add_url_mapping($url_mappings);
}
}
}
 
private function add_rewrite_rule($match,$path,$options='L,QSA')
{
$this->add_line('RewriteRule '.$match.' '.$this->general_config->get_site_path().'/'.ltrim($path,'/').' ['.$options.']');
}
 
private function add_url_mapping(UrlMappingsExtensionPoint $mapping_list)
{
foreach($mapping_list->list_mappings()as $mapping)
{
$this->add_rewrite_rule($mapping->from(),$mapping->to(),$mapping->options());
}
}
 
private function add_php_and_http_protections()
{
$this->add_section('PHP and HTTP protections');
$this->add_line('# Disable the HTTP TRACE Method');
$this->add_line('RewriteCond %{REQUEST_METHOD} ^TRACE');
$this->add_line('RewriteRule .* - [F]');
$this->add_empty_line();
$this->add_line('# Block out use of illegal or unsafe characters in the HTTP Request');
$this->add_line('RewriteCond %{THE_REQUEST} ^.*(\\r|\\n|%0A|%0D).* [NC,OR]');
$this->add_line('# Block out use of illegal or unsafe characters in the Referer Variable of the HTTP Request');
$this->add_line('RewriteCond %{HTTP_REFERER} ^(.*)(<|>|\'|%0A|%0D|%27|%3C|%3E|%00).* [NC]');
$this->add_line('RewriteRule .* - [F,L]');
$this->add_empty_line();
$this->add_line('# Protect against PHP-CGI Remote Code Execution Bug. CVE-2012-1823');
$this->add_line('RewriteCond %{QUERY_STRING} ^(%2d|\-)[^=]+$ [NC]');
$this->add_line('RewriteRule .* - [F,L]');
$this->add_empty_line();
$this->add_line('# Stop \'PHP Easter Eggs\' from working, http://perishablepress.com/expose-php/');
$this->add_line('RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC,OR]');
$this->add_line('# Stop proc/self/environ?');
$this->add_line('RewriteCond %{QUERY_STRING} proc/self/environ [OR]');
$this->add_line('# Block out any script trying to set a mosConfig value through the URL');
$this->add_line('RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]');
$this->add_line('# Block out any script trying to base64_encode/decode content via URL');
$this->add_line('RewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\([^)]*\) [OR]');
$this->add_line('# Block out any script that includes a <script> tag in URL');
$this->add_line('RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]');
$this->add_line('# Block out any script trying to set a PHP GLOBALS variable via URL');
$this->add_line('RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]');
$this->add_line('# Block out any script trying to modify a _REQUEST variable via URL');
$this->add_line('RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2})');
$this->add_line('RewriteRule .* - [F,L]');
}
 
private function add_file_and_sql_injections_protections()
{
$this->add_section('File and SQL injections protections');
$this->add_line('RewriteCond %{REQUEST_METHOD} GET');
$this->add_line('RewriteCond %{QUERY_STRING} (;|<|>|\'|"|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|cast|set|declare|drop|update|md5|benchmark) [NC,OR]');
$this->add_line('RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:// [OR]');
$this->add_line('RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http%3A%2F%2F [OR]');
$this->add_line('RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [OR]');
$this->add_line('RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]');
$this->add_line('RewriteCond %{QUERY_STRING} (<|>|\'|%0A|%0D|%27|%3C|%3E|%00) [NC]');
$this->add_line('RewriteRule .* - [F,L]');
}
 
private function force_https_if_available()
{
 
 
 
 
}
 
private function add_bandwidth_protection()
{
 
if(FileUploadConfig::load()->get_enable_bandwidth_protect())
{
$this->add_section('Bandwith protection');
$this->add_line('RewriteCond %{HTTP_REFERER} !^$');
$this->add_line('RewriteCond %{HTTP_REFERER} !^'.$this->general_config->get_site_url());
$this->add_line('RewriteRule .*upload/.*$ - [F]');
$this->add_section('Stop hotlinking');
$this->add_line('RewriteCond %{HTTP_REFERER} !^$');
$this->add_line('RewriteCond %{HTTP_REFERER} !^'.$this->general_config->get_site_url());
$this->add_line('RewriteRule \.(bmp|gif|jpe?g|png|swf)$ - [F,L,NC]');
}
}
 
private function add_robots_protection()
{
 
$this->add_section('Bots blocking protection');
$this->add_line('# URL encoded HTML, see http://www.w3schools.com/tags/ref_urlencode.asp');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} (<|>|\'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]');
$this->add_line('# Address harvesters');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(autoemailspider|ExtractorPro) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^E?Mail.?(Collect|Harvest|Magnet|Reaper|Siphon|Sweeper|Wolf) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} (DTS.?Agent|Email.?Extrac) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_REFERER} iaea\.org [NC,OR]');
$this->add_line('# Download managers');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Alligator|DA.?[0-9]|DC\-Sakura|Download.?(Demon|Express|Master|Wonder)|FileHound) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Flash|Leech)Get [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Fresh|Lightning|Mass|Real|Smart|Speed|Star).?Download(er)? [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Gamespy|Go!Zilla|iGetter|JetCar|Net(Ants|Pumper)|SiteSnagger|Teleport.?Pro|WebReaper) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(My)?GetRight [NC,OR]');
$this->add_line('# Image-grabbers');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(AcoiRobot|FlickBot|webcollage) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Express|Mister|Web).?(Web|Pix|Image).?(Pictures|Collector)? [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^Image.?(fetch|Stripper|Sucker) [NC,OR]');
$this->add_line('# "Gray-hats"');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Atomz|BlackWidow|BlogBot|EasyDL|Marketwave|Sqworm|SurveyBot|Webclipping\.com) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} (girafa\.com|gossamer\-threads\.com|grub\-client|Netcraft|Nutch) [NC,OR]');
$this->add_line('# Site-grabbers');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(eCatch|(Get|Super)Bot|Kapere|HTTrack|JOC|Offline|UtilMind|Xaldon) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^Web.?(Auto|Cop|dup|Fetch|Filter|Gather|Go|Leach|Mine|Mirror|Pix|QL|RACE|Sauger) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^Web.?(site.?(eXtractor|Quester)|Snake|ster|Strip|Suck|vac|walk|Whacker|ZIP) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} WebCapture [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^DISCo\ Pump [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^EirGrabber [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^Net\ Vampire [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^NetZIP [NC,OR]');
$this->add_line('# Tools');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Dart.?Communications|Enfish|htdig|Java|larbin) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} (FrontPage|Indy.?Library|RPT\-HTTPClient) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(libwww|lwp|libwww-perl.*|PHP|Python|www\.thatrobotsite\.com|webbandit|Zeus) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Microsoft|MFC).(Data|Internet|URL|WebDAV|Foundation).(Access|Explorer|Control|MiniRedir|Class) [NC,OR]');
$this->add_line('# Unknown');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Crawl_Application|Lachesis|Nutscrape) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^[CDEFPRS](Browse|Eval|Surf) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Demo|Full.?Web|Lite|Production|Franklin|Missauga|Missigua).?(Bot|Locat) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} (efp@gmx\.net|hhjhj@yahoo\.com|lerly\.net|mapfeatures\.net|metacarta\.com) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Industry|Internet|IUFW|Lincoln|Missouri|Program).?(Program|Explore|Web|State|College|Shareware) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Mac|Ram|Educate|WEP).?(Finder|Search) [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^(Moz+illa|MSIE).?[0-9]?.?[0-9]?[0-9]?$ [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} ^Mozilla/[0-9]\.[0-9][0-9]?.\(compatible[\)\ ] [NC,OR]');
$this->add_line('RewriteCond %{HTTP_USER_AGENT} NaverRobot [NC]');
$this->add_line('RewriteRule .* - [F,L]');
}
 
private function add_error_redirection()
{
 
$this->add_section('Error pages');
$this->add_line('ErrorDocument 403 '.$this->general_config->get_site_path().UserUrlBuilder::error_403()->relative());
$this->add_line('ErrorDocument 404 '.$this->general_config->get_site_path().UserUrlBuilder::error_404()->relative());
}
 
private function add_gzip_compression()
{
$this->add_section('Gzip compression');
$this->add_line('<IfDefine !Free>');
$this->add_line('    <IfModule mod_filter.c>');
$this->add_line('        <IfModule mod_deflate.c>');
$this->add_line('            # Compress HTML, CSS, JavaScript, Text, XML and fonts');
$this->add_line('            AddOutputFilterByType DEFLATE application/javascript');
$this->add_line('            AddOutputFilterByType DEFLATE application/rss+xml');
$this->add_line('            AddOutputFilterByType DEFLATE application/vnd.ms-fontobject');
$this->add_line('            AddOutputFilterByType DEFLATE application/x-font');
$this->add_line('            AddOutputFilterByType DEFLATE application/x-font-opentype');
$this->add_line('            AddOutputFilterByType DEFLATE application/x-font-otf');
$this->add_line('            AddOutputFilterByType DEFLATE application/x-font-truetype');
$this->add_line('            AddOutputFilterByType DEFLATE application/x-font-ttf');
$this->add_line('            AddOutputFilterByType DEFLATE application/x-javascript');
$this->add_line('            AddOutputFilterByType DEFLATE application/xhtml+xml');
$this->add_line('            AddOutputFilterByType DEFLATE application/xml');
$this->add_line('            AddOutputFilterByType DEFLATE font/opentype');
$this->add_line('            AddOutputFilterByType DEFLATE font/otf');
$this->add_line('            AddOutputFilterByType DEFLATE font/ttf');
$this->add_line('            AddOutputFilterByType DEFLATE image/svg+xml');
$this->add_line('            AddOutputFilterByType DEFLATE image/x-icon');
$this->add_line('            AddOutputFilterByType DEFLATE text/css');
$this->add_line('            AddOutputFilterByType DEFLATE text/html');
$this->add_line('            AddOutputFilterByType DEFLATE text/javascript');
$this->add_line('            AddOutputFilterByType DEFLATE text/plain');
$this->add_line('            AddOutputFilterByType DEFLATE text/xml');
$this->add_empty_line();
$this->add_line('            # Remove browser bugs (only needed for really old browsers)');
$this->add_line('            BrowserMatch ^Mozilla/4 gzip-only-text/html');
$this->add_line('            BrowserMatch ^Mozilla/4\.0[678] no-gzip');
$this->add_line('            BrowserMatch \bMSIE !no-gzip !gzip-only-text/html');
$this->add_line('            <IfModule mod_headers.c>');
$this->add_line('                Header append Vary User-Agent');
$this->add_line('            </IfModule>');
$this->add_line('        </IfModule>');
$this->add_line('    </IfModule>');
$this->add_line('</IfDefine>');
}
 
private function add_expires_headers()
{
$this->add_section('Expires Headers');
$this->add_line('<IfDefine !Free>');
$this->add_line('    <IfModule mod_expires.c>');
$this->add_line('        ExpiresActive On');
$this->add_empty_line();
$this->add_line('        # Default expiration: 1 week after request');
$this->add_line('        ExpiresDefault "access plus 1 week"');
$this->add_empty_line();
$this->add_line('        # CSS and JS expiration: 1 week after request');
$this->add_line('        ExpiresByType text/css "access plus 1 week"');
$this->add_line('        ExpiresByType text/javascript "access plus 1 week"');
$this->add_line('        ExpiresByType text/x-javascript "access plus 1 week"');
$this->add_line('        ExpiresByType application/javascript "access plus 1 week"');
$this->add_line('        ExpiresByType application/x-javascript "access plus 1 week"');
$this->add_empty_line();
$this->add_line('        # Image files expiration: 1 month after request');
$this->add_line('        ExpiresByType image/bmp "access plus 1 month"');
$this->add_line('        ExpiresByType image/gif "access plus 1 month"');
$this->add_line('        ExpiresByType image/jpeg "access plus 1 month"');
$this->add_line('        ExpiresByType image/jp2 "access plus 1 month"');
$this->add_line('        ExpiresByType image/pipeg "access plus 1 month"');
$this->add_line('        ExpiresByType image/png "access plus 1 month"');
$this->add_line('        ExpiresByType image/svg+xml "access plus 1 month"');
$this->add_line('        ExpiresByType image/tiff "access plus 1 month"');
$this->add_line('        ExpiresByType image/vnd.microsoft.icon "access plus 1 month"');
$this->add_line('        ExpiresByType image/x-icon "access plus 1 month"');
$this->add_line('        ExpiresByType image/ico "access plus 1 month"');
$this->add_line('        ExpiresByType image/icon "access plus 1 month"');
$this->add_line('        ExpiresByType text/ico "access plus 1 month"');
$this->add_line('        ExpiresByType application/ico "access plus 1 month"');
$this->add_line('        ExpiresByType image/vnd.wap.wbmp "access plus 1 month"');
$this->add_line('        ExpiresByType application/vnd.wap.wbxml "access plus 1 month"');
$this->add_line('        ExpiresByType application/smil "access plus 1 month"');
$this->add_empty_line();
$this->add_line('        # Audio files expiration: 1 month after request');
$this->add_line('        ExpiresByType audio/basic "access plus 1 month"');
$this->add_line('        ExpiresByType audio/mid "access plus 1 month"');
$this->add_line('        ExpiresByType audio/midi "access plus 1 month"');
$this->add_line('        ExpiresByType audio/mpeg "access plus 1 month"');
$this->add_line('        ExpiresByType audio/x-aiff "access plus 1 month"');
$this->add_line('        ExpiresByType audio/x-mpegurl "access plus 1 month"');
$this->add_line('        ExpiresByType audio/x-pn-realaudio "access plus 1 month"');
$this->add_line('        ExpiresByType audio/x-wav "access plus 1 month"');
$this->add_empty_line();
$this->add_line('        # Movie files expiration: 1 month after request');
$this->add_line('        ExpiresByType application/x-shockwave-flash "access plus 1 month"');
$this->add_line('        ExpiresByType x-world/x-vrml "access plus 1 month"');
$this->add_line('        ExpiresByType video/x-msvideo "access plus 1 month"');
$this->add_line('        ExpiresByType video/mpeg "access plus 1 month"');
$this->add_line('        ExpiresByType video/mp4 "access plus 1 month"');
$this->add_line('        ExpiresByType video/quicktime "access plus 1 month"');
$this->add_line('        ExpiresByType video/x-la-asf "access plus 1 month"');
$this->add_line('        ExpiresByType video/x-ms-asf "access plus 1 month"');
$this->add_line('    </IfModule>');
$this->add_line('</IfDefine>');
}
 
private function disable_file_etags()
{
$this->add_section('Disable file etags');
$this->add_line('<IfDefine !Free>');
$this->add_line('    FileETag none');
$this->add_line('</IfDefine>');
}
 
private function add_manual_content()
{
$manual_content=ServerEnvironmentConfig::load()->get_htaccess_manual_content();
if(!empty($manual_content))
{
$this->add_section('Manual content');
$this->add_line($manual_content);
}
}
 
private function clean_file_content()
{
$this->htaccess_file_content=trim($this->htaccess_file_content);
}
 
 
 
 
 
public function get_htaccess_file_content()
{
return $this->htaccess_file_content;
}
 
 
 
 
 
public static function load()
{
return CacheManager::load(__CLASS__,'kernel','htaccess-file');
}
 
 
 
 
public static function invalidate()
{
CacheManager::invalidate('kernel','htaccess-file');
}
 
 
 
 
public static function regenerate()
{
self::invalidate();
self::update_htaccess_file();
}
 
private static function update_htaccess_file()
{
$file=new File(PATH_TO_ROOT.'/.htaccess');
 
try
{
$file->write(self::get_file_content());
$file->close();
}
catch(IOException $ex)
{
ErrorHandler::add_error_in_log('Couldn\'t write the .htaccess file. Please check the site root read authorizations.','');
}
}
 
 
 
 
 
private static function get_file_content()
{
return self::load()->get_htaccess_file_content();
}
}
?>