Hacker News new | ask | show | jobs
by k_roy 1009 days ago
This is probably more ancient documentation for switchers from Apache.

The main reason for this is to make sure your htaccess file is outside of the document root. This is horrible behavior Apache had (still has?), and is a security issue.

1 comments

The Apache httpd documentation has been telling people not to use .htaccess files for over twenty years.

> However, in general, use of .htaccess files should be avoided when possible. Any configuration that you would consider putting in a .htaccess file, can just as effectively be made in a <Directory> section in your main server configuration file.

2002: https://web.archive.org/web/20020805160131/http://httpd.apac...

Present day: https://httpd.apache.org/docs/current/howto/htaccess.html#wh...