.htaccess aşagıdaki gibidir.
Options +FollowSymLinks -Indexes
DirectoryIndex index.php index.html
AddDefaultCharset UTF-8
ServerSignature Off
SetEnv SERVER_ADMIN mail@mail.com
<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>
<Files "cron.php">
Order deny,allow
Deny from all
Allow from 127.0.0.1
Allow from localhost
</Files>
AddHandler cgi-script .pl .py .jsp .asp .sh .cgi
Options -ExecCGI
RewriteEngine On
RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|POST|PROPFIND|OPTIONS|PUT)$ [NC]
RewriteRule .* - [F,NS,L]
RewriteCond %{THE_REQUEST} !^[A-Z]{3,9}\ .+\ HTTP/(0\.9|1\.0|1\.1) [NC]
RewriteRule .* - [F,NS,L]
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (\<|%3C).*iframe.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^.*$ /index.php [L] 