phpapache2xenforo

Are my Apache2 RewriteEngine On and AllowOverride All changes secure?


I made some changes to my website configuration in order to get friendly urls working on Xenforo2 running on Apache2.

a) I turned RewriteEngine "On" in my .htaccess file

b) I modified RewriteBase to '/' in my .htaccess file

c) I changed AllowOverride from "None" to "All" in the section of my Apache2 configuration.

Do any of these changes open me up to security problems down the line? My apache2 version is 2.4.25 (Debian)


Solution

  • No. Those 3 additions/modifications to your .htaccess file and apache config pose no direct security risk.