1 # Turn off all options we don't need.

     2 Options None

     3 Options +SymLinksIfOwnerMatch

     4 

     5 # Set the catch-all handler to prevent scripts from being executed.

     6 SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006

     7 <Files *>

     8   # Override the handler again if we're run later in the evaluation list.

     9   SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003

    10 </Files>

    11 

    12 # If we know how to do it safely, disable the PHP engine entirely.

    13 <IfModule mod_php5.c>

    14   php_flag engine off

    15 </IfModule>