diff --git a/lib/linguist/languages.yml b/lib/linguist/languages.yml
index aaa3a455..18d413e4 100644
--- a/lib/linguist/languages.yml
+++ b/lib/linguist/languages.yml
@@ -68,10 +68,6 @@ ApacheConf:
aliases:
- apache
primary_extension: .apacheconf
- filenames:
- - .htaccess
- - httpd.conf
- - apache2.conf
Apex:
type: programming
@@ -834,8 +830,6 @@ Nginx:
type: markup
lexer: Nginx configuration file
primary_extension: .nginxconf
- filenames:
- - nginx.conf
Nimrod:
type: programming
diff --git a/lib/linguist/samples.json b/lib/linguist/samples.json
index 26526ea3..f0ede727 100644
--- a/lib/linguist/samples.json
+++ b/lib/linguist/samples.json
@@ -242,9 +242,17 @@
]
},
"filenames": {
+ "ApacheConf": [
+ ".htaccess",
+ "apache2.conf",
+ "httpd.conf"
+ ],
"INI": [
".gitconfig"
],
+ "Nginx": [
+ "nginx.conf"
+ ],
"Perl": [
"ack"
],
@@ -268,9 +276,438 @@
".gemrc"
]
},
- "tokens_total": 271895,
- "languages_total": 283,
+ "tokens_total": 273523,
+ "languages_total": 287,
"tokens": {
+ "ApacheConf": {
+ "ServerSignature": 1,
+ "Off": 1,
+ "RewriteCond": 15,
+ "%": 48,
+ "{": 16,
+ "REQUEST_METHOD": 1,
+ "}": 16,
+ "(": 16,
+ "HEAD": 1,
+ "|": 80,
+ "TRACE": 1,
+ "DELETE": 1,
+ "TRACK": 1,
+ ")": 17,
+ "[": 17,
+ "NC": 13,
+ "OR": 14,
+ "]": 17,
+ "THE_REQUEST": 1,
+ "r": 1,
+ "n": 1,
+ "A": 6,
+ "D": 6,
+ "HTTP_REFERER": 1,
+ "<|>": 6,
+ "C": 5,
+ "E": 5,
+ "HTTP_COOKIE": 1,
+ "REQUEST_URI": 1,
+ "/": 3,
+ ";": 2,
+ "<": 1,
+ ".": 7,
+ "HTTP_USER_AGENT": 5,
+ "java": 1,
+ "curl": 2,
+ "wget": 2,
+ "winhttp": 1,
+ "HTTrack": 1,
+ "clshttp": 1,
+ "archiver": 1,
+ "loader": 1,
+ "email": 1,
+ "harvest": 1,
+ "extract": 1,
+ "grab": 1,
+ "miner": 1,
+ "libwww": 1,
+ "-": 43,
+ "perl": 1,
+ "python": 1,
+ "nikto": 1,
+ "scan": 1,
+ "#Block": 1,
+ "mySQL": 1,
+ "injects": 1,
+ "QUERY_STRING": 5,
+ ".*": 3,
+ "*": 1,
+ "union": 1,
+ "select": 1,
+ "insert": 1,
+ "cast": 1,
+ "set": 1,
+ "declare": 1,
+ "drop": 1,
+ "update": 1,
+ "md5": 1,
+ "benchmark": 1,
+ "./": 1,
+ "localhost": 1,
+ "loopback": 1,
+ ".0": 2,
+ ".1": 1,
+ "a": 1,
+ "z0": 1,
+ "RewriteRule": 1,
+ "index.php": 1,
+ "F": 1,
+ "#": 182,
+ "ServerRoot": 2,
+ "#Listen": 2,
+ "Listen": 2,
+ "LoadModule": 126,
+ "authn_file_module": 2,
+ "/usr/lib/apache2/modules/mod_authn_file.so": 1,
+ "authn_dbm_module": 2,
+ "/usr/lib/apache2/modules/mod_authn_dbm.so": 1,
+ "authn_anon_module": 2,
+ "/usr/lib/apache2/modules/mod_authn_anon.so": 1,
+ "authn_dbd_module": 2,
+ "/usr/lib/apache2/modules/mod_authn_dbd.so": 1,
+ "authn_default_module": 2,
+ "/usr/lib/apache2/modules/mod_authn_default.so": 1,
+ "authn_alias_module": 1,
+ "/usr/lib/apache2/modules/mod_authn_alias.so": 1,
+ "authz_host_module": 2,
+ "/usr/lib/apache2/modules/mod_authz_host.so": 1,
+ "authz_groupfile_module": 2,
+ "/usr/lib/apache2/modules/mod_authz_groupfile.so": 1,
+ "authz_user_module": 2,
+ "/usr/lib/apache2/modules/mod_authz_user.so": 1,
+ "authz_dbm_module": 2,
+ "/usr/lib/apache2/modules/mod_authz_dbm.so": 1,
+ "authz_owner_module": 2,
+ "/usr/lib/apache2/modules/mod_authz_owner.so": 1,
+ "authnz_ldap_module": 1,
+ "/usr/lib/apache2/modules/mod_authnz_ldap.so": 1,
+ "authz_default_module": 2,
+ "/usr/lib/apache2/modules/mod_authz_default.so": 1,
+ "auth_basic_module": 2,
+ "/usr/lib/apache2/modules/mod_auth_basic.so": 1,
+ "auth_digest_module": 2,
+ "/usr/lib/apache2/modules/mod_auth_digest.so": 1,
+ "file_cache_module": 1,
+ "/usr/lib/apache2/modules/mod_file_cache.so": 1,
+ "cache_module": 2,
+ "/usr/lib/apache2/modules/mod_cache.so": 1,
+ "disk_cache_module": 2,
+ "/usr/lib/apache2/modules/mod_disk_cache.so": 1,
+ "mem_cache_module": 2,
+ "/usr/lib/apache2/modules/mod_mem_cache.so": 1,
+ "dbd_module": 2,
+ "/usr/lib/apache2/modules/mod_dbd.so": 1,
+ "dumpio_module": 2,
+ "/usr/lib/apache2/modules/mod_dumpio.so": 1,
+ "ext_filter_module": 2,
+ "/usr/lib/apache2/modules/mod_ext_filter.so": 1,
+ "include_module": 2,
+ "/usr/lib/apache2/modules/mod_include.so": 1,
+ "filter_module": 2,
+ "/usr/lib/apache2/modules/mod_filter.so": 1,
+ "charset_lite_module": 1,
+ "/usr/lib/apache2/modules/mod_charset_lite.so": 1,
+ "deflate_module": 2,
+ "/usr/lib/apache2/modules/mod_deflate.so": 1,
+ "ldap_module": 1,
+ "/usr/lib/apache2/modules/mod_ldap.so": 1,
+ "log_forensic_module": 2,
+ "/usr/lib/apache2/modules/mod_log_forensic.so": 1,
+ "env_module": 2,
+ "/usr/lib/apache2/modules/mod_env.so": 1,
+ "mime_magic_module": 2,
+ "/usr/lib/apache2/modules/mod_mime_magic.so": 1,
+ "cern_meta_module": 2,
+ "/usr/lib/apache2/modules/mod_cern_meta.so": 1,
+ "expires_module": 2,
+ "/usr/lib/apache2/modules/mod_expires.so": 1,
+ "headers_module": 2,
+ "/usr/lib/apache2/modules/mod_headers.so": 1,
+ "ident_module": 2,
+ "/usr/lib/apache2/modules/mod_ident.so": 1,
+ "usertrack_module": 2,
+ "/usr/lib/apache2/modules/mod_usertrack.so": 1,
+ "unique_id_module": 2,
+ "/usr/lib/apache2/modules/mod_unique_id.so": 1,
+ "setenvif_module": 2,
+ "/usr/lib/apache2/modules/mod_setenvif.so": 1,
+ "version_module": 2,
+ "/usr/lib/apache2/modules/mod_version.so": 1,
+ "proxy_module": 2,
+ "/usr/lib/apache2/modules/mod_proxy.so": 1,
+ "proxy_connect_module": 2,
+ "/usr/lib/apache2/modules/mod_proxy_connect.so": 1,
+ "proxy_ftp_module": 2,
+ "/usr/lib/apache2/modules/mod_proxy_ftp.so": 1,
+ "proxy_http_module": 2,
+ "/usr/lib/apache2/modules/mod_proxy_http.so": 1,
+ "proxy_ajp_module": 2,
+ "/usr/lib/apache2/modules/mod_proxy_ajp.so": 1,
+ "proxy_balancer_module": 2,
+ "/usr/lib/apache2/modules/mod_proxy_balancer.so": 1,
+ "ssl_module": 4,
+ "/usr/lib/apache2/modules/mod_ssl.so": 1,
+ "mime_module": 4,
+ "/usr/lib/apache2/modules/mod_mime.so": 1,
+ "dav_module": 2,
+ "/usr/lib/apache2/modules/mod_dav.so": 1,
+ "status_module": 2,
+ "/usr/lib/apache2/modules/mod_status.so": 1,
+ "autoindex_module": 2,
+ "/usr/lib/apache2/modules/mod_autoindex.so": 1,
+ "asis_module": 2,
+ "/usr/lib/apache2/modules/mod_asis.so": 1,
+ "info_module": 2,
+ "/usr/lib/apache2/modules/mod_info.so": 1,
+ "suexec_module": 1,
+ "/usr/lib/apache2/modules/mod_suexec.so": 1,
+ "cgid_module": 3,
+ "/usr/lib/apache2/modules/mod_cgid.so": 1,
+ "cgi_module": 2,
+ "/usr/lib/apache2/modules/mod_cgi.so": 1,
+ "dav_fs_module": 2,
+ "/usr/lib/apache2/modules/mod_dav_fs.so": 1,
+ "dav_lock_module": 1,
+ "/usr/lib/apache2/modules/mod_dav_lock.so": 1,
+ "vhost_alias_module": 2,
+ "/usr/lib/apache2/modules/mod_vhost_alias.so": 1,
+ "negotiation_module": 2,
+ "/usr/lib/apache2/modules/mod_negotiation.so": 1,
+ "dir_module": 4,
+ "/usr/lib/apache2/modules/mod_dir.so": 1,
+ "imagemap_module": 2,
+ "/usr/lib/apache2/modules/mod_imagemap.so": 1,
+ "actions_module": 2,
+ "/usr/lib/apache2/modules/mod_actions.so": 1,
+ "speling_module": 2,
+ "/usr/lib/apache2/modules/mod_speling.so": 1,
+ "userdir_module": 2,
+ "/usr/lib/apache2/modules/mod_userdir.so": 1,
+ "alias_module": 4,
+ "/usr/lib/apache2/modules/mod_alias.so": 1,
+ "rewrite_module": 2,
+ "/usr/lib/apache2/modules/mod_rewrite.so": 1,
+ "": 17,
+ "mpm_netware_module": 2,
+ "User": 2,
+ "daemon": 2,
+ "Group": 2,
+ "": 17,
+ "ServerAdmin": 2,
+ "you@example.com": 2,
+ "#ServerName": 2,
+ "www.example.com": 2,
+ "DocumentRoot": 2,
+ "": 6,
+ "Options": 6,
+ "FollowSymLinks": 4,
+ "AllowOverride": 6,
+ "None": 8,
+ "Order": 10,
+ "deny": 10,
+ "allow": 10,
+ "Deny": 6,
+ "from": 10,
+ "all": 10,
+ "": 6,
+ "usr": 2,
+ "share": 1,
+ "apache2": 1,
+ "default": 1,
+ "site": 1,
+ "htdocs": 1,
+ "Indexes": 2,
+ "Allow": 4,
+ "DirectoryIndex": 2,
+ "index.html": 2,
+ "": 2,
+ "ht": 1,
+ "Satisfy": 4,
+ "All": 4,
+ "": 2,
+ "ErrorLog": 2,
+ "/var/log/apache2/error_log": 1,
+ "LogLevel": 2,
+ "warn": 2,
+ "log_config_module": 3,
+ "LogFormat": 6,
+ "combined": 4,
+ "common": 4,
+ "logio_module": 3,
+ "combinedio": 2,
+ "CustomLog": 2,
+ "/var/log/apache2/access_log": 2,
+ "#CustomLog": 2,
+ "ScriptAlias": 1,
+ "/cgi": 2,
+ "bin/": 2,
+ "#Scriptsock": 2,
+ "/var/run/apache2/cgisock": 1,
+ "lib": 1,
+ "cgi": 3,
+ "bin": 1,
+ "DefaultType": 2,
+ "text/plain": 2,
+ "TypesConfig": 2,
+ "/etc/apache2/mime.types": 1,
+ "#AddType": 4,
+ "application/x": 6,
+ "gzip": 6,
+ ".tgz": 6,
+ "#AddEncoding": 4,
+ "x": 4,
+ "compress": 4,
+ ".Z": 4,
+ ".gz": 4,
+ "AddType": 4,
+ "#AddHandler": 4,
+ "script": 2,
+ ".cgi": 2,
+ "type": 2,
+ "map": 2,
+ "var": 2,
+ "text/html": 2,
+ ".shtml": 4,
+ "#AddOutputFilter": 2,
+ "INCLUDES": 2,
+ "#MIMEMagicFile": 2,
+ "/etc/apache2/magic": 1,
+ "#ErrorDocument": 8,
+ "/missing.html": 2,
+ "http": 2,
+ "//www.example.com/subscription_info.html": 2,
+ "#EnableMMAP": 2,
+ "off": 5,
+ "#EnableSendfile": 2,
+ "#Include": 17,
+ "/etc/apache2/extra/httpd": 11,
+ "mpm.conf": 2,
+ "multilang": 2,
+ "errordoc.conf": 2,
+ "autoindex.conf": 2,
+ "languages.conf": 2,
+ "userdir.conf": 2,
+ "info.conf": 2,
+ "vhosts.conf": 2,
+ "manual.conf": 2,
+ "dav.conf": 2,
+ "default.conf": 2,
+ "ssl.conf": 2,
+ "SSLRandomSeed": 4,
+ "startup": 2,
+ "builtin": 4,
+ "connect": 2,
+ "libexec/apache2/mod_authn_file.so": 1,
+ "libexec/apache2/mod_authn_dbm.so": 1,
+ "libexec/apache2/mod_authn_anon.so": 1,
+ "libexec/apache2/mod_authn_dbd.so": 1,
+ "libexec/apache2/mod_authn_default.so": 1,
+ "libexec/apache2/mod_authz_host.so": 1,
+ "libexec/apache2/mod_authz_groupfile.so": 1,
+ "libexec/apache2/mod_authz_user.so": 1,
+ "libexec/apache2/mod_authz_dbm.so": 1,
+ "libexec/apache2/mod_authz_owner.so": 1,
+ "libexec/apache2/mod_authz_default.so": 1,
+ "libexec/apache2/mod_auth_basic.so": 1,
+ "libexec/apache2/mod_auth_digest.so": 1,
+ "libexec/apache2/mod_cache.so": 1,
+ "libexec/apache2/mod_disk_cache.so": 1,
+ "libexec/apache2/mod_mem_cache.so": 1,
+ "libexec/apache2/mod_dbd.so": 1,
+ "libexec/apache2/mod_dumpio.so": 1,
+ "reqtimeout_module": 1,
+ "libexec/apache2/mod_reqtimeout.so": 1,
+ "libexec/apache2/mod_ext_filter.so": 1,
+ "libexec/apache2/mod_include.so": 1,
+ "libexec/apache2/mod_filter.so": 1,
+ "substitute_module": 1,
+ "libexec/apache2/mod_substitute.so": 1,
+ "libexec/apache2/mod_deflate.so": 1,
+ "libexec/apache2/mod_log_config.so": 1,
+ "libexec/apache2/mod_log_forensic.so": 1,
+ "libexec/apache2/mod_logio.so": 1,
+ "libexec/apache2/mod_env.so": 1,
+ "libexec/apache2/mod_mime_magic.so": 1,
+ "libexec/apache2/mod_cern_meta.so": 1,
+ "libexec/apache2/mod_expires.so": 1,
+ "libexec/apache2/mod_headers.so": 1,
+ "libexec/apache2/mod_ident.so": 1,
+ "libexec/apache2/mod_usertrack.so": 1,
+ "#LoadModule": 4,
+ "libexec/apache2/mod_unique_id.so": 1,
+ "libexec/apache2/mod_setenvif.so": 1,
+ "libexec/apache2/mod_version.so": 1,
+ "libexec/apache2/mod_proxy.so": 1,
+ "libexec/apache2/mod_proxy_connect.so": 1,
+ "libexec/apache2/mod_proxy_ftp.so": 1,
+ "libexec/apache2/mod_proxy_http.so": 1,
+ "proxy_scgi_module": 1,
+ "libexec/apache2/mod_proxy_scgi.so": 1,
+ "libexec/apache2/mod_proxy_ajp.so": 1,
+ "libexec/apache2/mod_proxy_balancer.so": 1,
+ "libexec/apache2/mod_ssl.so": 1,
+ "libexec/apache2/mod_mime.so": 1,
+ "libexec/apache2/mod_dav.so": 1,
+ "libexec/apache2/mod_status.so": 1,
+ "libexec/apache2/mod_autoindex.so": 1,
+ "libexec/apache2/mod_asis.so": 1,
+ "libexec/apache2/mod_info.so": 1,
+ "libexec/apache2/mod_cgi.so": 1,
+ "libexec/apache2/mod_dav_fs.so": 1,
+ "libexec/apache2/mod_vhost_alias.so": 1,
+ "libexec/apache2/mod_negotiation.so": 1,
+ "libexec/apache2/mod_dir.so": 1,
+ "libexec/apache2/mod_imagemap.so": 1,
+ "libexec/apache2/mod_actions.so": 1,
+ "libexec/apache2/mod_speling.so": 1,
+ "libexec/apache2/mod_userdir.so": 1,
+ "libexec/apache2/mod_alias.so": 1,
+ "libexec/apache2/mod_rewrite.so": 1,
+ "perl_module": 1,
+ "libexec/apache2/mod_perl.so": 1,
+ "php5_module": 1,
+ "libexec/apache2/libphp5.so": 1,
+ "hfs_apple_module": 1,
+ "libexec/apache2/mod_hfs_apple.so": 1,
+ "mpm_winnt_module": 1,
+ "_www": 2,
+ "Library": 2,
+ "WebServer": 2,
+ "Documents": 1,
+ "MultiViews": 1,
+ "Hh": 1,
+ "Tt": 1,
+ "Dd": 1,
+ "Ss": 2,
+ "_": 1,
+ "": 1,
+ "rsrc": 1,
+ "": 1,
+ "": 1,
+ "namedfork": 1,
+ "": 1,
+ "ScriptAliasMatch": 1,
+ "i": 1,
+ "webobjects": 1,
+ "/private/var/run/cgisock": 1,
+ "CGI": 1,
+ "Executables": 1,
+ "/private/etc/apache2/mime.types": 1,
+ "/private/etc/apache2/magic": 1,
+ "#MaxRanges": 1,
+ "unlimited": 1,
+ "TraceEnable": 1,
+ "Include": 6,
+ "/private/etc/apache2/extra/httpd": 11,
+ "/private/etc/apache2/other/*.conf": 1
+ },
"Apex": {
"global": 70,
"class": 7,
@@ -16821,6 +17258,93 @@
"WriteLine": 1,
"}": 2
},
+ "Nginx": {
+ "user": 1,
+ "www": 2,
+ ";": 35,
+ "worker_processes": 1,
+ "error_log": 1,
+ "logs/error.log": 1,
+ "pid": 1,
+ "logs/nginx.pid": 1,
+ "worker_rlimit_nofile": 1,
+ "events": 1,
+ "{": 10,
+ "worker_connections": 1,
+ "}": 10,
+ "http": 3,
+ "include": 3,
+ "conf/mime.types": 1,
+ "/etc/nginx/proxy.conf": 1,
+ "/etc/nginx/fastcgi.conf": 1,
+ "index": 1,
+ "index.html": 1,
+ "index.htm": 1,
+ "index.php": 1,
+ "default_type": 1,
+ "application/octet": 1,
+ "-": 2,
+ "stream": 1,
+ "log_format": 1,
+ "main": 5,
+ "access_log": 4,
+ "logs/access.log": 1,
+ "sendfile": 1,
+ "on": 2,
+ "tcp_nopush": 1,
+ "server_names_hash_bucket_size": 1,
+ "#": 4,
+ "this": 1,
+ "seems": 1,
+ "to": 1,
+ "be": 1,
+ "required": 1,
+ "for": 1,
+ "some": 1,
+ "vhosts": 1,
+ "server": 7,
+ "php/fastcgi": 1,
+ "listen": 3,
+ "server_name": 3,
+ "domain1.com": 1,
+ "www.domain1.com": 1,
+ "logs/domain1.access.log": 1,
+ "root": 2,
+ "html": 1,
+ "location": 4,
+ ".php": 1,
+ "fastcgi_pass": 1,
+ "simple": 2,
+ "reverse": 1,
+ "proxy": 1,
+ "domain2.com": 1,
+ "www.domain2.com": 1,
+ "logs/domain2.access.log": 1,
+ "/": 4,
+ "(": 1,
+ "images": 1,
+ "|": 6,
+ "javascript": 1,
+ "js": 1,
+ "css": 1,
+ "flash": 1,
+ "media": 1,
+ "static": 1,
+ ")": 1,
+ "/var/www/virtual/big.server.com/htdocs": 1,
+ "expires": 1,
+ "d": 1,
+ "proxy_pass": 2,
+ "//127.0.0.1": 1,
+ "upstream": 1,
+ "big_server_com": 1,
+ "weight": 2,
+ "load": 1,
+ "balancing": 1,
+ "big.server.com": 1,
+ "logs/big.server.access.log": 1,
+ "//big_server_com": 1
+ },
"Nimrod": {
"echo": 1
},
@@ -27887,6 +28411,7 @@
}
},
"language_tokens": {
+ "ApacheConf": 1449,
"Apex": 4408,
"AppleScript": 1862,
"Arduino": 20,
@@ -27920,6 +28445,7 @@
"Matlab": 343,
"Max": 136,
"Nemerle": 17,
+ "Nginx": 179,
"Nimrod": 1,
"Nu": 4,
"Objective-C": 26518,
@@ -27960,6 +28486,7 @@
"YAML": 30
},
"languages": {
+ "ApacheConf": 3,
"Apex": 6,
"AppleScript": 7,
"Arduino": 1,
@@ -27993,6 +28520,7 @@
"Matlab": 6,
"Max": 1,
"Nemerle": 1,
+ "Nginx": 1,
"Nimrod": 1,
"Nu": 1,
"Objective-C": 19,
@@ -28032,5 +28560,5 @@
"XSLT": 1,
"YAML": 1
},
- "md5": "c6f7461e5a21cd29111f800bd97e944e"
+ "md5": "abe754c33b0b8bd82a2b60ecc08d00a4"
}
\ No newline at end of file
diff --git a/samples/ApacheConf/filenames/.htaccess b/samples/ApacheConf/filenames/.htaccess
new file mode 100644
index 00000000..29bd614a
--- /dev/null
+++ b/samples/ApacheConf/filenames/.htaccess
@@ -0,0 +1,26 @@
+ServerSignature Off
+RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK) [NC,OR]
+RewriteCond %{THE_REQUEST} (\\r|\\n|%0A|%0D) [NC,OR]
+
+RewriteCond %{HTTP_REFERER} (<|>|’|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
+RewriteCond %{HTTP_COOKIE} (<|>|’|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
+RewriteCond %{REQUEST_URI} ^/(,|;|:|<|>|”>|”<|/|\\\.\.\\).{0,9999} [NC,OR]
+
+RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
+RewriteCond %{HTTP_USER_AGENT} ^(java|curl|wget) [NC,OR]
+RewriteCond %{HTTP_USER_AGENT} (winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
+RewriteCond %{HTTP_USER_AGENT} (libwww-perl|curl|wget|python|nikto|scan) [NC,OR]
+RewriteCond %{HTTP_USER_AGENT} (<|>|’|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
+
+#Block mySQL injects
+RewriteCond %{QUERY_STRING} (;|<|>|’|”|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|cast|set|declare|drop|update|md5|benchmark) [NC,OR]
+
+RewriteCond %{QUERY_STRING} \.\./\.\. [OR]
+
+RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]
+RewriteCond %{QUERY_STRING} \.[a-z0-9] [NC,OR]
+RewriteCond %{QUERY_STRING} (<|>|’|%0A|%0D|%27|%3C|%3E|%00) [NC]
+# Note: The final RewriteCond must NOT use the [OR] flag.
+
+# Return 403 Forbidden error.
+RewriteRule .* index.php [F]
diff --git a/samples/ApacheConf/filenames/apache2.conf b/samples/ApacheConf/filenames/apache2.conf
new file mode 100644
index 00000000..0a2d7ed6
--- /dev/null
+++ b/samples/ApacheConf/filenames/apache2.conf
@@ -0,0 +1,470 @@
+# This is the main Apache HTTP server configuration file. It contains the
+# configuration directives that give the server its instructions.
+# See for detailed information.
+# In particular, see
+#
+# for a discussion of each configuration directive.
+#
+# Do NOT simply read the instructions in here without understanding
+# what they do. They're here only as hints or reminders. If you are unsure
+# consult the online docs. You have been warned.
+#
+# Configuration and logfile names: If the filenames you specify for many
+# of the server's control files begin with "/" (or "drive:/" for Win32), the
+# server will use that explicit path. If the filenames do *not* begin
+# with "/", the value of ServerRoot is prepended -- so "/var/log/apache2/foo.log"
+# with ServerRoot set to "" will be interpreted by the
+# server as "//var/log/apache2/foo.log".
+
+#
+# ServerRoot: The top of the directory tree under which the server's
+# configuration, error, and log files are kept.
+#
+# Do not add a slash at the end of the directory path. If you point
+# ServerRoot at a non-local disk, be sure to point the LockFile directive
+# at a local disk. If you wish to share the same ServerRoot for multiple
+# httpd daemons, you will need to change at least LockFile and PidFile.
+#
+ServerRoot ""
+
+#
+# Listen: Allows you to bind Apache to specific IP addresses and/or
+# ports, instead of the default. See also the
+# directive.
+#
+# Change this to Listen on specific IP addresses as shown below to
+# prevent Apache from glomming onto all bound IP addresses.
+#
+#Listen 12.34.56.78:80
+Listen 80
+
+#
+# Dynamic Shared Object (DSO) Support
+#
+# To be able to use the functionality of a module which was built as a DSO you
+# have to place corresponding `LoadModule' lines at this location so the
+# directives contained in it are actually available _before_ they are used.
+# Statically compiled modules (those listed by `httpd -l') do not need
+# to be loaded here.
+#
+# Example:
+# LoadModule foo_module modules/mod_foo.so
+#
+LoadModule authn_file_module /usr/lib/apache2/modules/mod_authn_file.so
+LoadModule authn_dbm_module /usr/lib/apache2/modules/mod_authn_dbm.so
+LoadModule authn_anon_module /usr/lib/apache2/modules/mod_authn_anon.so
+LoadModule authn_dbd_module /usr/lib/apache2/modules/mod_authn_dbd.so
+LoadModule authn_default_module /usr/lib/apache2/modules/mod_authn_default.so
+LoadModule authn_alias_module /usr/lib/apache2/modules/mod_authn_alias.so
+LoadModule authz_host_module /usr/lib/apache2/modules/mod_authz_host.so
+LoadModule authz_groupfile_module /usr/lib/apache2/modules/mod_authz_groupfile.so
+LoadModule authz_user_module /usr/lib/apache2/modules/mod_authz_user.so
+LoadModule authz_dbm_module /usr/lib/apache2/modules/mod_authz_dbm.so
+LoadModule authz_owner_module /usr/lib/apache2/modules/mod_authz_owner.so
+LoadModule authnz_ldap_module /usr/lib/apache2/modules/mod_authnz_ldap.so
+LoadModule authz_default_module /usr/lib/apache2/modules/mod_authz_default.so
+LoadModule auth_basic_module /usr/lib/apache2/modules/mod_auth_basic.so
+LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so
+LoadModule file_cache_module /usr/lib/apache2/modules/mod_file_cache.so
+LoadModule cache_module /usr/lib/apache2/modules/mod_cache.so
+LoadModule disk_cache_module /usr/lib/apache2/modules/mod_disk_cache.so
+LoadModule mem_cache_module /usr/lib/apache2/modules/mod_mem_cache.so
+LoadModule dbd_module /usr/lib/apache2/modules/mod_dbd.so
+LoadModule dumpio_module /usr/lib/apache2/modules/mod_dumpio.so
+LoadModule ext_filter_module /usr/lib/apache2/modules/mod_ext_filter.so
+LoadModule include_module /usr/lib/apache2/modules/mod_include.so
+LoadModule filter_module /usr/lib/apache2/modules/mod_filter.so
+LoadModule charset_lite_module /usr/lib/apache2/modules/mod_charset_lite.so
+LoadModule deflate_module /usr/lib/apache2/modules/mod_deflate.so
+LoadModule ldap_module /usr/lib/apache2/modules/mod_ldap.so
+LoadModule log_forensic_module /usr/lib/apache2/modules/mod_log_forensic.so
+LoadModule env_module /usr/lib/apache2/modules/mod_env.so
+LoadModule mime_magic_module /usr/lib/apache2/modules/mod_mime_magic.so
+LoadModule cern_meta_module /usr/lib/apache2/modules/mod_cern_meta.so
+LoadModule expires_module /usr/lib/apache2/modules/mod_expires.so
+LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
+LoadModule ident_module /usr/lib/apache2/modules/mod_ident.so
+LoadModule usertrack_module /usr/lib/apache2/modules/mod_usertrack.so
+LoadModule unique_id_module /usr/lib/apache2/modules/mod_unique_id.so
+LoadModule setenvif_module /usr/lib/apache2/modules/mod_setenvif.so
+LoadModule version_module /usr/lib/apache2/modules/mod_version.so
+LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
+LoadModule proxy_connect_module /usr/lib/apache2/modules/mod_proxy_connect.so
+LoadModule proxy_ftp_module /usr/lib/apache2/modules/mod_proxy_ftp.so
+LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
+LoadModule proxy_ajp_module /usr/lib/apache2/modules/mod_proxy_ajp.so
+LoadModule proxy_balancer_module /usr/lib/apache2/modules/mod_proxy_balancer.so
+LoadModule ssl_module /usr/lib/apache2/modules/mod_ssl.so
+LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so
+LoadModule dav_module /usr/lib/apache2/modules/mod_dav.so
+LoadModule status_module /usr/lib/apache2/modules/mod_status.so
+LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so
+LoadModule asis_module /usr/lib/apache2/modules/mod_asis.so
+LoadModule info_module /usr/lib/apache2/modules/mod_info.so
+LoadModule suexec_module /usr/lib/apache2/modules/mod_suexec.so
+LoadModule cgid_module /usr/lib/apache2/modules/mod_cgid.so
+LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so
+LoadModule dav_fs_module /usr/lib/apache2/modules/mod_dav_fs.so
+LoadModule dav_lock_module /usr/lib/apache2/modules/mod_dav_lock.so
+LoadModule vhost_alias_module /usr/lib/apache2/modules/mod_vhost_alias.so
+LoadModule negotiation_module /usr/lib/apache2/modules/mod_negotiation.so
+LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so
+LoadModule imagemap_module /usr/lib/apache2/modules/mod_imagemap.so
+LoadModule actions_module /usr/lib/apache2/modules/mod_actions.so
+LoadModule speling_module /usr/lib/apache2/modules/mod_speling.so
+LoadModule userdir_module /usr/lib/apache2/modules/mod_userdir.so
+LoadModule alias_module /usr/lib/apache2/modules/mod_alias.so
+LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so
+
+
+#
+# If you wish httpd to run as a different user or group, you must run
+# httpd as root initially and it will switch.
+#
+# User/Group: The name (or #number) of the user/group to run httpd as.
+# It is usually good practice to create a dedicated user and group for
+# running httpd, as with most system services.
+#
+User daemon
+Group daemon
+
+
+# 'Main' server configuration
+#
+# The directives in this section set up the values used by the 'main'
+# server, which responds to any requests that aren't handled by a
+# definition. These values also provide defaults for
+# any containers you may define later in the file.
+#
+# All of these directives may appear inside containers,
+# in which case these default settings will be overridden for the
+# virtual host being defined.
+#
+
+#
+# ServerAdmin: Your address, where problems with the server should be
+# e-mailed. This address appears on some server-generated pages, such
+# as error documents. e.g. admin@your-domain.com
+#
+ServerAdmin you@example.com
+
+#
+# ServerName gives the name and port that the server uses to identify itself.
+# This can often be determined automatically, but we recommend you specify
+# it explicitly to prevent problems during startup.
+#
+# If your host doesn't have a registered DNS name, enter its IP address here.
+#
+#ServerName www.example.com:80
+
+#
+# DocumentRoot: The directory out of which you will serve your
+# documents. By default, all requests are taken from this directory, but
+# symbolic links and aliases may be used to point to other locations.
+#
+DocumentRoot "/usr/share/apache2/default-site/htdocs"
+
+#
+# Each directory to which Apache has access can be configured with respect
+# to which services and features are allowed and/or disabled in that
+# directory (and its subdirectories).
+#
+# First, we configure the "default" to be a very restrictive set of
+# features.
+#
+
+ Options FollowSymLinks
+ AllowOverride None
+ Order deny,allow
+ Deny from all
+
+
+#
+# Note that from this point forward you must specifically allow
+# particular features to be enabled - so if something's not working as
+# you might expect, make sure that you have specifically enabled it
+# below.
+#
+
+#
+# This should be changed to whatever you set DocumentRoot to.
+#
+
+ #
+ # Possible values for the Options directive are "None", "All",
+ # or any combination of:
+ # Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
+ #
+ # Note that "MultiViews" must be named *explicitly* --- "Options All"
+ # doesn't give it to you.
+ #
+ # The Options directive is both complicated and important. Please see
+ # http://httpd.apache.org/docs/2.2/mod/core.html#options
+ # for more information.
+ #
+ Options Indexes FollowSymLinks
+
+ #
+ # AllowOverride controls what directives may be placed in .htaccess files.
+ # It can be "All", "None", or any combination of the keywords:
+ # Options FileInfo AuthConfig Limit
+ #
+ AllowOverride None
+
+ #
+ # Controls who can get stuff from this server.
+ #
+ Order allow,deny
+ Allow from all
+
+
+
+#
+# DirectoryIndex: sets the file that Apache will serve if a directory
+# is requested.
+#
+
+ DirectoryIndex index.html
+
+
+#
+# The following lines prevent .htaccess and .htpasswd files from being
+# viewed by Web clients.
+#
+
+ Order allow,deny
+ Deny from all
+ Satisfy All
+
+
+#
+# ErrorLog: The location of the error log file.
+# If you do not specify an ErrorLog directive within a
+# container, error messages relating to that virtual host will be
+# logged here. If you *do* define an error logfile for a
+# container, that host's errors will be logged there and not here.
+#
+ErrorLog /var/log/apache2/error_log
+
+#
+# LogLevel: Control the number of messages logged to the error_log.
+# Possible values include: debug, info, notice, warn, error, crit,
+# alert, emerg.
+#
+LogLevel warn
+
+
+ #
+ # The following directives define some format nicknames for use with
+ # a CustomLog directive (see below).
+ #
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+ LogFormat "%h %l %u %t \"%r\" %>s %b" common
+
+
+ # You need to enable mod_logio.c to use %I and %O
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
+
+
+ #
+ # The location and format of the access logfile (Common Logfile Format).
+ # If you do not define any access logfiles within a
+ # container, they will be logged here. Contrariwise, if you *do*
+ # define per- access logfiles, transactions will be
+ # logged therein and *not* in this file.
+ #
+ CustomLog /var/log/apache2/access_log common
+
+ #
+ # If you prefer a logfile with access, agent, and referer information
+ # (Combined Logfile Format) you can use the following directive.
+ #
+ #CustomLog /var/log/apache2/access_log combined
+
+
+
+ #
+ # Redirect: Allows you to tell clients about documents that used to
+ # exist in your server's namespace, but do not anymore. The client
+ # will make a new request for the document at its new location.
+ # Example:
+ # Redirect permanent /foo http://www.example.com/bar
+
+ #
+ # Alias: Maps web paths into filesystem paths and is used to
+ # access content that does not live under the DocumentRoot.
+ # Example:
+ # Alias /webpath /full/filesystem/path
+ #
+ # If you include a trailing / on /webpath then the server will
+ # require it to be present in the URL. You will also likely
+ # need to provide a section to allow access to
+ # the filesystem path.
+
+ #
+ # ScriptAlias: This controls which directories contain server scripts.
+ # ScriptAliases are essentially the same as Aliases, except that
+ # documents in the target directory are treated as applications and
+ # run by the server when requested rather than as documents sent to the
+ # client. The same rules about trailing "/" apply to ScriptAlias
+ # directives as to Alias.
+ #
+ ScriptAlias /cgi-bin/ "/usr/lib/cgi-bin/"
+
+
+
+
+ #
+ # ScriptSock: On threaded servers, designate the path to the UNIX
+ # socket used to communicate with the CGI daemon of mod_cgid.
+ #
+ #Scriptsock /var/run/apache2/cgisock
+
+
+#
+# "/usr/lib/cgi-bin" should be changed to whatever your ScriptAliased
+# CGI directory exists, if you have that configured.
+#
+
+ AllowOverride None
+ Options None
+ Order allow,deny
+ Allow from all
+
+
+#
+# DefaultType: the default MIME type the server will use for a document
+# if it cannot otherwise determine one, such as from filename extensions.
+# If your server contains mostly text or HTML documents, "text/plain" is
+# a good value. If most of your content is binary, such as applications
+# or images, you may want to use "application/octet-stream" instead to
+# keep browsers from trying to display binary files as though they are
+# text.
+#
+DefaultType text/plain
+
+
+ #
+ # TypesConfig points to the file containing the list of mappings from
+ # filename extension to MIME-type.
+ #
+ TypesConfig /etc/apache2/mime.types
+
+ #
+ # AddType allows you to add to or override the MIME configuration
+ # file specified in TypesConfig for specific file types.
+ #
+ #AddType application/x-gzip .tgz
+ #
+ # AddEncoding allows you to have certain browsers uncompress
+ # information on the fly. Note: Not all browsers support this.
+ #
+ #AddEncoding x-compress .Z
+ #AddEncoding x-gzip .gz .tgz
+ #
+ # If the AddEncoding directives above are commented-out, then you
+ # probably should define those extensions to indicate media types:
+ #
+ AddType application/x-compress .Z
+ AddType application/x-gzip .gz .tgz
+
+ #
+ # AddHandler allows you to map certain file extensions to "handlers":
+ # actions unrelated to filetype. These can be either built into the server
+ # or added with the Action directive (see below)
+ #
+ # To use CGI scripts outside of ScriptAliased directories:
+ # (You will also need to add "ExecCGI" to the "Options" directive.)
+ #
+ #AddHandler cgi-script .cgi
+
+ # For type maps (negotiated resources):
+ #AddHandler type-map var
+
+ #
+ # Filters allow you to process content before it is sent to the client.
+ #
+ # To parse .shtml files for server-side includes (SSI):
+ # (You will also need to add "Includes" to the "Options" directive.)
+ #
+ #AddType text/html .shtml
+ #AddOutputFilter INCLUDES .shtml
+
+
+#
+# The mod_mime_magic module allows the server to use various hints from the
+# contents of the file itself to determine its type. The MIMEMagicFile
+# directive tells the module where the hint definitions are located.
+#
+#MIMEMagicFile /etc/apache2/magic
+
+#
+# Customizable error responses come in three flavors:
+# 1) plain text 2) local redirects 3) external redirects
+#
+# Some examples:
+#ErrorDocument 500 "The server made a boo boo."
+#ErrorDocument 404 /missing.html
+#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
+#ErrorDocument 402 http://www.example.com/subscription_info.html
+#
+
+#
+# EnableMMAP and EnableSendfile: On systems that support it,
+# memory-mapping or the sendfile syscall is used to deliver
+# files. This usually improves server performance, but must
+# be turned off when serving from networked-mounted
+# filesystems or if support for these functions is otherwise
+# broken on your system.
+#
+#EnableMMAP off
+#EnableSendfile off
+
+# Supplemental configuration
+#
+# The configuration files in the /etc/apache2/extra/ directory can be
+# included to add extra features or to modify the default configuration of
+# the server, or you may simply copy their contents here and change as
+# necessary.
+
+# Server-pool management (MPM specific)
+#Include /etc/apache2/extra/httpd-mpm.conf
+
+# Multi-language error messages
+#Include /etc/apache2/extra/httpd-multilang-errordoc.conf
+
+# Fancy directory listings
+#Include /etc/apache2/extra/httpd-autoindex.conf
+
+# Language settings
+#Include /etc/apache2/extra/httpd-languages.conf
+
+# User home directories
+#Include /etc/apache2/extra/httpd-userdir.conf
+
+# Real-time info on requests and configuration
+#Include /etc/apache2/extra/httpd-info.conf
+
+# Virtual hosts
+#Include /etc/apache2/extra/httpd-vhosts.conf
+
+# Local access to the Apache HTTP Server Manual
+#Include /etc/apache2/extra/httpd-manual.conf
+
+# Distributed authoring and versioning (WebDAV)
+#Include /etc/apache2/extra/httpd-dav.conf
+
+# Various default settings
+#Include /etc/apache2/extra/httpd-default.conf
+
+# Secure (SSL/TLS) connections
+#Include /etc/apache2/extra/httpd-ssl.conf
+#
+# Note: The following must must be present to support
+# starting without SSL on platforms with no /dev/random equivalent
+# but a statically compiled-in mod_ssl.
+#
+
+SSLRandomSeed startup builtin
+SSLRandomSeed connect builtin
+
diff --git a/samples/ApacheConf/filenames/httpd.conf b/samples/ApacheConf/filenames/httpd.conf
new file mode 100644
index 00000000..4fde2693
--- /dev/null
+++ b/samples/ApacheConf/filenames/httpd.conf
@@ -0,0 +1,500 @@
+#
+# This is the main Apache HTTP server configuration file. It contains the
+# configuration directives that give the server its instructions.
+# See for detailed information.
+# In particular, see
+#
+# for a discussion of each configuration directive.
+#
+# Do NOT simply read the instructions in here without understanding
+# what they do. They're here only as hints or reminders. If you are unsure
+# consult the online docs. You have been warned.
+#
+# Configuration and logfile names: If the filenames you specify for many
+# of the server's control files begin with "/" (or "drive:/" for Win32), the
+# server will use that explicit path. If the filenames do *not* begin
+# with "/", the value of ServerRoot is prepended -- so "log/foo_log"
+# with ServerRoot set to "/usr" will be interpreted by the
+# server as "/usr/log/foo_log".
+
+#
+# ServerRoot: The top of the directory tree under which the server's
+# configuration, error, and log files are kept.
+#
+# Do not add a slash at the end of the directory path. If you point
+# ServerRoot at a non-local disk, be sure to point the LockFile directive
+# at a local disk. If you wish to share the same ServerRoot for multiple
+# httpd daemons, you will need to change at least LockFile and PidFile.
+#
+ServerRoot "/usr"
+
+#
+# Listen: Allows you to bind Apache to specific IP addresses and/or
+# ports, instead of the default. See also the
+# directive.
+#
+# Change this to Listen on specific IP addresses as shown below to
+# prevent Apache from glomming onto all bound IP addresses.
+#
+#Listen 12.34.56.78:80
+Listen 80
+
+#
+# Dynamic Shared Object (DSO) Support
+#
+# To be able to use the functionality of a module which was built as a DSO you
+# have to place corresponding `LoadModule' lines at this location so the
+# directives contained in it are actually available _before_ they are used.
+# Statically compiled modules (those listed by `httpd -l') do not need
+# to be loaded here.
+#
+# Example:
+# LoadModule foo_module modules/mod_foo.so
+#
+LoadModule authn_file_module libexec/apache2/mod_authn_file.so
+LoadModule authn_dbm_module libexec/apache2/mod_authn_dbm.so
+LoadModule authn_anon_module libexec/apache2/mod_authn_anon.so
+LoadModule authn_dbd_module libexec/apache2/mod_authn_dbd.so
+LoadModule authn_default_module libexec/apache2/mod_authn_default.so
+LoadModule authz_host_module libexec/apache2/mod_authz_host.so
+LoadModule authz_groupfile_module libexec/apache2/mod_authz_groupfile.so
+LoadModule authz_user_module libexec/apache2/mod_authz_user.so
+LoadModule authz_dbm_module libexec/apache2/mod_authz_dbm.so
+LoadModule authz_owner_module libexec/apache2/mod_authz_owner.so
+LoadModule authz_default_module libexec/apache2/mod_authz_default.so
+LoadModule auth_basic_module libexec/apache2/mod_auth_basic.so
+LoadModule auth_digest_module libexec/apache2/mod_auth_digest.so
+LoadModule cache_module libexec/apache2/mod_cache.so
+LoadModule disk_cache_module libexec/apache2/mod_disk_cache.so
+LoadModule mem_cache_module libexec/apache2/mod_mem_cache.so
+LoadModule dbd_module libexec/apache2/mod_dbd.so
+LoadModule dumpio_module libexec/apache2/mod_dumpio.so
+LoadModule reqtimeout_module libexec/apache2/mod_reqtimeout.so
+LoadModule ext_filter_module libexec/apache2/mod_ext_filter.so
+LoadModule include_module libexec/apache2/mod_include.so
+LoadModule filter_module libexec/apache2/mod_filter.so
+LoadModule substitute_module libexec/apache2/mod_substitute.so
+LoadModule deflate_module libexec/apache2/mod_deflate.so
+LoadModule log_config_module libexec/apache2/mod_log_config.so
+LoadModule log_forensic_module libexec/apache2/mod_log_forensic.so
+LoadModule logio_module libexec/apache2/mod_logio.so
+LoadModule env_module libexec/apache2/mod_env.so
+LoadModule mime_magic_module libexec/apache2/mod_mime_magic.so
+LoadModule cern_meta_module libexec/apache2/mod_cern_meta.so
+LoadModule expires_module libexec/apache2/mod_expires.so
+LoadModule headers_module libexec/apache2/mod_headers.so
+LoadModule ident_module libexec/apache2/mod_ident.so
+LoadModule usertrack_module libexec/apache2/mod_usertrack.so
+#LoadModule unique_id_module libexec/apache2/mod_unique_id.so
+LoadModule setenvif_module libexec/apache2/mod_setenvif.so
+LoadModule version_module libexec/apache2/mod_version.so
+LoadModule proxy_module libexec/apache2/mod_proxy.so
+LoadModule proxy_connect_module libexec/apache2/mod_proxy_connect.so
+LoadModule proxy_ftp_module libexec/apache2/mod_proxy_ftp.so
+LoadModule proxy_http_module libexec/apache2/mod_proxy_http.so
+LoadModule proxy_scgi_module libexec/apache2/mod_proxy_scgi.so
+LoadModule proxy_ajp_module libexec/apache2/mod_proxy_ajp.so
+LoadModule proxy_balancer_module libexec/apache2/mod_proxy_balancer.so
+LoadModule ssl_module libexec/apache2/mod_ssl.so
+LoadModule mime_module libexec/apache2/mod_mime.so
+LoadModule dav_module libexec/apache2/mod_dav.so
+LoadModule status_module libexec/apache2/mod_status.so
+LoadModule autoindex_module libexec/apache2/mod_autoindex.so
+LoadModule asis_module libexec/apache2/mod_asis.so
+LoadModule info_module libexec/apache2/mod_info.so
+LoadModule cgi_module libexec/apache2/mod_cgi.so
+LoadModule dav_fs_module libexec/apache2/mod_dav_fs.so
+LoadModule vhost_alias_module libexec/apache2/mod_vhost_alias.so
+LoadModule negotiation_module libexec/apache2/mod_negotiation.so
+LoadModule dir_module libexec/apache2/mod_dir.so
+LoadModule imagemap_module libexec/apache2/mod_imagemap.so
+LoadModule actions_module libexec/apache2/mod_actions.so
+LoadModule speling_module libexec/apache2/mod_speling.so
+LoadModule userdir_module libexec/apache2/mod_userdir.so
+LoadModule alias_module libexec/apache2/mod_alias.so
+LoadModule rewrite_module libexec/apache2/mod_rewrite.so
+#LoadModule perl_module libexec/apache2/mod_perl.so
+#LoadModule php5_module libexec/apache2/libphp5.so
+#LoadModule hfs_apple_module libexec/apache2/mod_hfs_apple.so
+
+
+
+#
+# If you wish httpd to run as a different user or group, you must run
+# httpd as root initially and it will switch.
+#
+# User/Group: The name (or #number) of the user/group to run httpd as.
+# It is usually good practice to create a dedicated user and group for
+# running httpd, as with most system services.
+#
+User _www
+Group _www
+
+
+
+
+# 'Main' server configuration
+#
+# The directives in this section set up the values used by the 'main'
+# server, which responds to any requests that aren't handled by a
+# definition. These values also provide defaults for
+# any containers you may define later in the file.
+#
+# All of these directives may appear inside containers,
+# in which case these default settings will be overridden for the
+# virtual host being defined.
+#
+
+#
+# ServerAdmin: Your address, where problems with the server should be
+# e-mailed. This address appears on some server-generated pages, such
+# as error documents. e.g. admin@your-domain.com
+#
+ServerAdmin you@example.com
+
+#
+# ServerName gives the name and port that the server uses to identify itself.
+# This can often be determined automatically, but we recommend you specify
+# it explicitly to prevent problems during startup.
+#
+# If your host doesn't have a registered DNS name, enter its IP address here.
+#
+#ServerName www.example.com:80
+
+#
+# DocumentRoot: The directory out of which you will serve your
+# documents. By default, all requests are taken from this directory, but
+# symbolic links and aliases may be used to point to other locations.
+#
+DocumentRoot "/Library/WebServer/Documents"
+
+#
+# Each directory to which Apache has access can be configured with respect
+# to which services and features are allowed and/or disabled in that
+# directory (and its subdirectories).
+#
+# First, we configure the "default" to be a very restrictive set of
+# features.
+#
+
+ Options FollowSymLinks
+ AllowOverride None
+ Order deny,allow
+ Deny from all
+
+
+#
+# Note that from this point forward you must specifically allow
+# particular features to be enabled - so if something's not working as
+# you might expect, make sure that you have specifically enabled it
+# below.
+#
+
+#
+# This should be changed to whatever you set DocumentRoot to.
+#
+
+ #
+ # Possible values for the Options directive are "None", "All",
+ # or any combination of:
+ # Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
+ #
+ # Note that "MultiViews" must be named *explicitly* --- "Options All"
+ # doesn't give it to you.
+ #
+ # The Options directive is both complicated and important. Please see
+ # http://httpd.apache.org/docs/2.2/mod/core.html#options
+ # for more information.
+ #
+ Options Indexes FollowSymLinks MultiViews
+
+ #
+ # AllowOverride controls what directives may be placed in .htaccess files.
+ # It can be "All", "None", or any combination of the keywords:
+ # Options FileInfo AuthConfig Limit
+ #
+ AllowOverride None
+
+ #
+ # Controls who can get stuff from this server.
+ #
+ Order allow,deny
+ Allow from all
+
+
+
+#
+# DirectoryIndex: sets the file that Apache will serve if a directory
+# is requested.
+#
+
+ DirectoryIndex index.html
+
+
+#
+# The following lines prevent .htaccess and .htpasswd files from being
+# viewed by Web clients.
+#
+
+ Order allow,deny
+ Deny from all
+ Satisfy All
+
+
+#
+# Apple specific filesystem protection.
+#
+
+ Order allow,deny
+ Deny from all
+ Satisfy All
+
+
+ Order allow,deny
+ Deny from all
+ Satisfy All
+
+
+#
+# ErrorLog: The location of the error log file.
+# If you do not specify an ErrorLog directive within a
+# container, error messages relating to that virtual host will be
+# logged here. If you *do* define an error logfile for a
+# container, that host's errors will be logged there and not here.
+#
+ErrorLog "/private/var/log/apache2/error_log"
+
+#
+# LogLevel: Control the number of messages logged to the error_log.
+# Possible values include: debug, info, notice, warn, error, crit,
+# alert, emerg.
+#
+LogLevel warn
+
+
+ #
+ # The following directives define some format nicknames for use with
+ # a CustomLog directive (see below).
+ #
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+ LogFormat "%h %l %u %t \"%r\" %>s %b" common
+
+
+ # You need to enable mod_logio.c to use %I and %O
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
+
+
+ #
+ # The location and format of the access logfile (Common Logfile Format).
+ # If you do not define any access logfiles within a
+ # container, they will be logged here. Contrariwise, if you *do*
+ # define per- access logfiles, transactions will be
+ # logged therein and *not* in this file.
+ #
+ CustomLog "/private/var/log/apache2/access_log" common
+
+ #
+ # If you prefer a logfile with access, agent, and referer information
+ # (Combined Logfile Format) you can use the following directive.
+ #
+ #CustomLog "/private/var/log/apache2/access_log" combined
+
+
+
+ #
+ # Redirect: Allows you to tell clients about documents that used to
+ # exist in your server's namespace, but do not anymore. The client
+ # will make a new request for the document at its new location.
+ # Example:
+ # Redirect permanent /foo http://www.example.com/bar
+
+ #
+ # Alias: Maps web paths into filesystem paths and is used to
+ # access content that does not live under the DocumentRoot.
+ # Example:
+ # Alias /webpath /full/filesystem/path
+ #
+ # If you include a trailing / on /webpath then the server will
+ # require it to be present in the URL. You will also likely
+ # need to provide a section to allow access to
+ # the filesystem path.
+
+ #
+ # ScriptAlias: This controls which directories contain server scripts.
+ # ScriptAliases are essentially the same as Aliases, except that
+ # documents in the target directory are treated as applications and
+ # run by the server when requested rather than as documents sent to the
+ # client. The same rules about trailing "/" apply to ScriptAlias
+ # directives as to Alias.
+ #
+ ScriptAliasMatch ^/cgi-bin/((?!(?i:webobjects)).*$) "/Library/WebServer/CGI-Executables/$1"
+
+
+
+
+ #
+ # ScriptSock: On threaded servers, designate the path to the UNIX
+ # socket used to communicate with the CGI daemon of mod_cgid.
+ #
+ #Scriptsock /private/var/run/cgisock
+
+
+#
+# "/Library/WebServer/CGI-Executables" should be changed to whatever your ScriptAliased
+# CGI directory exists, if you have that configured.
+#
+
+ AllowOverride None
+ Options None
+ Order allow,deny
+ Allow from all
+
+
+#
+# DefaultType: the default MIME type the server will use for a document
+# if it cannot otherwise determine one, such as from filename extensions.
+# If your server contains mostly text or HTML documents, "text/plain" is
+# a good value. If most of your content is binary, such as applications
+# or images, you may want to use "application/octet-stream" instead to
+# keep browsers from trying to display binary files as though they are
+# text.
+#
+DefaultType text/plain
+
+
+ #
+ # TypesConfig points to the file containing the list of mappings from
+ # filename extension to MIME-type.
+ #
+ TypesConfig /private/etc/apache2/mime.types
+
+ #
+ # AddType allows you to add to or override the MIME configuration
+ # file specified in TypesConfig for specific file types.
+ #
+ #AddType application/x-gzip .tgz
+ #
+ # AddEncoding allows you to have certain browsers uncompress
+ # information on the fly. Note: Not all browsers support this.
+ #
+ #AddEncoding x-compress .Z
+ #AddEncoding x-gzip .gz .tgz
+ #
+ # If the AddEncoding directives above are commented-out, then you
+ # probably should define those extensions to indicate media types:
+ #
+ AddType application/x-compress .Z
+ AddType application/x-gzip .gz .tgz
+
+ #
+ # AddHandler allows you to map certain file extensions to "handlers":
+ # actions unrelated to filetype. These can be either built into the server
+ # or added with the Action directive (see below)
+ #
+ # To use CGI scripts outside of ScriptAliased directories:
+ # (You will also need to add "ExecCGI" to the "Options" directive.)
+ #
+ #AddHandler cgi-script .cgi
+
+ # For type maps (negotiated resources):
+ #AddHandler type-map var
+
+ #
+ # Filters allow you to process content before it is sent to the client.
+ #
+ # To parse .shtml files for server-side includes (SSI):
+ # (You will also need to add "Includes" to the "Options" directive.)
+ #
+ #AddType text/html .shtml
+ #AddOutputFilter INCLUDES .shtml
+
+
+#
+# The mod_mime_magic module allows the server to use various hints from the
+# contents of the file itself to determine its type. The MIMEMagicFile
+# directive tells the module where the hint definitions are located.
+#
+#MIMEMagicFile /private/etc/apache2/magic
+
+#
+# Customizable error responses come in three flavors:
+# 1) plain text 2) local redirects 3) external redirects
+#
+# Some examples:
+#ErrorDocument 500 "The server made a boo boo."
+#ErrorDocument 404 /missing.html
+#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
+#ErrorDocument 402 http://www.example.com/subscription_info.html
+#
+
+#
+# MaxRanges: Maximum number of Ranges in a request before
+# returning the entire resource, or one of the special
+# values 'default', 'none' or 'unlimited'.
+# Default setting is to accept 200 Ranges.
+#MaxRanges unlimited
+
+#
+# EnableMMAP and EnableSendfile: On systems that support it,
+# memory-mapping or the sendfile syscall is used to deliver
+# files. This usually improves server performance, but must
+# be turned off when serving from networked-mounted
+# filesystems or if support for these functions is otherwise
+# broken on your system.
+#
+#EnableMMAP off
+#EnableSendfile off
+
+# 6894961
+TraceEnable off
+
+# Supplemental configuration
+#
+# The configuration files in the /private/etc/apache2/extra/ directory can be
+# included to add extra features or to modify the default configuration of
+# the server, or you may simply copy their contents here and change as
+# necessary.
+
+# Server-pool management (MPM specific)
+Include /private/etc/apache2/extra/httpd-mpm.conf
+
+# Multi-language error messages
+#Include /private/etc/apache2/extra/httpd-multilang-errordoc.conf
+
+# Fancy directory listings
+Include /private/etc/apache2/extra/httpd-autoindex.conf
+
+# Language settings
+Include /private/etc/apache2/extra/httpd-languages.conf
+
+# User home directories
+Include /private/etc/apache2/extra/httpd-userdir.conf
+
+# Real-time info on requests and configuration
+#Include /private/etc/apache2/extra/httpd-info.conf
+
+# Virtual hosts
+#Include /private/etc/apache2/extra/httpd-vhosts.conf
+
+# Local access to the Apache HTTP Server Manual
+Include /private/etc/apache2/extra/httpd-manual.conf
+
+# Distributed authoring and versioning (WebDAV)
+#Include /private/etc/apache2/extra/httpd-dav.conf
+
+# Various default settings
+#Include /private/etc/apache2/extra/httpd-default.conf
+
+# Secure (SSL/TLS) connections
+#Include /private/etc/apache2/extra/httpd-ssl.conf
+#
+# Note: The following must must be present to support
+# starting without SSL on platforms with no /dev/random equivalent
+# but a statically compiled-in mod_ssl.
+#
+
+SSLRandomSeed startup builtin
+SSLRandomSeed connect builtin
+
+
+Include /private/etc/apache2/other/*.conf
diff --git a/samples/Nginx/filenames/nginx.conf b/samples/Nginx/filenames/nginx.conf
new file mode 100644
index 00000000..6bedb382
--- /dev/null
+++ b/samples/Nginx/filenames/nginx.conf
@@ -0,0 +1,70 @@
+user www www;
+worker_processes 5;
+error_log logs/error.log;
+pid logs/nginx.pid;
+worker_rlimit_nofile 8192;
+
+events {
+ worker_connections 4096;
+}
+
+http {
+ include conf/mime.types;
+ include /etc/nginx/proxy.conf;
+ include /etc/nginx/fastcgi.conf;
+ index index.html index.htm index.php;
+
+ default_type application/octet-stream;
+ log_format main '$remote_addr - $remote_user [$time_local] $status '
+ '"$request" $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"';
+ access_log logs/access.log main;
+ sendfile on;
+ tcp_nopush on;
+ server_names_hash_bucket_size 128; # this seems to be required for some vhosts
+
+ server { # php/fastcgi
+ listen 80;
+ server_name domain1.com www.domain1.com;
+ access_log logs/domain1.access.log main;
+ root html;
+
+ location ~ \.php$ {
+ fastcgi_pass 127.0.0.1:1025;
+ }
+ }
+
+ server { # simple reverse-proxy
+ listen 80;
+ server_name domain2.com www.domain2.com;
+ access_log logs/domain2.access.log main;
+
+ # serve static files
+ location ~ ^/(images|javascript|js|css|flash|media|static)/ {
+ root /var/www/virtual/big.server.com/htdocs;
+ expires 30d;
+ }
+
+ # pass requests for dynamic content to rails/turbogears/zope, et al
+ location / {
+ proxy_pass http://127.0.0.1:8080;
+ }
+ }
+
+ upstream big_server_com {
+ server 127.0.0.3:8000 weight=5;
+ server 127.0.0.3:8001 weight=5;
+ server 192.168.0.1:8000;
+ server 192.168.0.1:8001;
+ }
+
+ server { # simple load balancing
+ listen 80;
+ server_name big.server.com;
+ access_log logs/big.server.access.log main;
+
+ location / {
+ proxy_pass http://big_server_com;
+ }
+ }
+}