[Pmwiki-users] Re: more thoughts on .htaccess

[Joachim Durchholz]

Gunnar Wagenknecht wrote:
> What you wanna do is to disallow some file extensions and to 
> downgrade scripts (php) to text files.
> 
> AddType text/plain .php

This doesn't help - all it does is instruct Apache to consider the 
output from the PHP script as text/plain. You have to use the AddHandler 
directive to disable scripting. (There's a handler that will convert PHP 
source code to nicely syntax-highlighted and nl2br-converted HTML code, 
which is usually associated with .phps files - I forgot its name, but 
Google should find it easily; I'd expect that it comes with the mod_php 
module and would be perfect for preventing .php files from executing, 
just associate that handler with .php and .php3 instead of the usual PHP 
handler.)

Actually it's better to disallow downloads in general, then the handler 
associated with .php files doesn't matter.

Regards,
Jo
(who just configured several servers, but may still be occasionally 
wrong - Apache is a far too complex beast)