@shocki schrieb:
Leite in der .htaccess einfach alle Anfragen ohne http: auf https: weiter. Die Domain sollte über http gar nicht mehr aufgerufen werden können.
RewriteCond %{HTTPS} !=on RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Habe ich gemacht, jetzt krieg ich einen Umleitungsfehler.
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
RewriteBase /
Https config for the backend
#RewriteCond %{HTTPS} !=on
#RewriteRule backend/(.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
RewriteRule shopware.dll shopware.php
RewriteRule files/documents/.* engine [NC,L]
RewriteRule backend/media/(.*) media/$1 [NC,L]
RewriteCond %{REQUEST_URI} !(/(engine|files|templates|themes|web)/)
RewriteCond %{REQUEST_URI} !(/media/(archive|banner|image|music|pdf|unknown|video)/)
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ shopware.php [PT,L,QSA]
Fix missing authorization-header on fast_cgi installations
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
# Block access to VCS directories
RedirectMatch 404 /\.(svn|git|hg|bzr|cvs)(/|$)
# Restrict access to root folder files
RedirectMatch 404 /(composer.(json|lock)|README.md|UPGRADE.md)$
Staging environment
#SetEnvIf Host „staging.test.shopware.in“ SHOPWARE_ENV=staging
Development environment
#SetEnvIf Host „dev.shopware.in“ SHOPWARE_ENV=dev
#SetEnv SHOPWARE_ENV dev
DirectoryIndex index.html
DirectoryIndex index.php
DirectoryIndex shopware.php
Disables download of configuration
# Deny all requests from Apache 2.4+.
Require all denied
# Deny all requests from Apache 2.0-2.2.
Deny from all
Enable gzip compression
AddOutputFilterByType DEFLATE text/html text/xml text/plain text/css text/javascript application/javascript application/json
ExpiresActive on
ExpiresDefault „access plus 1 month“
Header append Cache-Control „public“
Header unset ETag
FileETag None
Match generated files like:
1429684458_t22_s1.css
1429684458_t22_s1.js
Header set Cache-Control „max-age=31536000, public“
ExpiresActive on
ExpiresDefault „access plus 1 year“
Disables auto directory index
Options -Indexes
Options -MultiViews
php_value memory_limit 256M
php_value max_execution_time 120
php_value upload_max_filesize 20M
php_flag phar.readonly off
php_flag magic_quotes_gpc off
php_flag session.auto_start off
php_flag suhosin.session.cryptua off
php_flag zend.ze1_compatibility_mode off
php_value always_populate_raw_post_data -1
# AddType x-mapp-php5 .php
# AddHandler x-mapp-php5 .php
Header append X-Frame-Options SAMEORIGIN
