Htaccess examples (security)

From Joomla! Documentation

It could be useful to add some explanations of what these settings do. Jossi 16:53, 6 March 2009 (UTC)

move olddomain redirect?

Why not move the olddomain redirect section to its own code block, or in the other useful settings code block.

Edit Requests 9 Dec 2014 15:03


This .htaccess file only allows tmpl=system and tmpl=component. It is possible for developers and templates to provide more options as we do in Nooku Framework.

This rule also does not stop people from fingerprinting Joomla sites either as any URL can still be accessed with tmpl=component.

So I would like to request the removal of the |mpl part in the following line:

RewriteCond %{QUERY_STRING} (^|&)t(p|emplate|mpl)= [NC]

More info and explanation can be found in the below links:

Hi, if you would like to put this forth you will have to create an issue on, and submit a PR for consideration. Please know, the examples you cited are considered not acceptable now by Nic. Thanks Tom Hutchison (talk) 08:05, 19 December 2014 (CST)