AddDefaultCharset utf-8
RewriteEngine On
RewriteCond %{HTTP_HOST} ^www.(\S+)$
RewriteRule ^(.*)$ http://%1$1 [R,L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !\.(swf)|(jpg)|(png)|(gif)$
RewriteRule ^(.+) index.php/$1 [QSA,L]
php_value "display_errors" "On"
php_value "allow_call_time_pass_reference" "On"
<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>
The security filtering function is called automatically when a new controller is invoked. It does the following:
* Destroys the global GET array. Since CodeIgniter does not utilize GET strings, there is no reason to allow it.
* Destroys all global variables in the event register_globals is turned on.
* Filters the POST/COOKIE array keys, permitting only alpha-numeric (and a few other) characters.
* Provides XSS (Cross-site Scripting Hacks) filtering. This can be enabled globally, or upon request.
* Standardizes newline characters to \n
$config['log_threshold'] = 4;