Hallo bplaced community!
Ich bin zur Abwechselung gerade dabei Drupal auszuprobieren. Bisher habe ich immer Joomla verwendet, was zusammen mit bplaced auch immer wunderbar funktioniert. Mit drupal hingegen, scheint es von Seiten bplaced einige Probleme zu geben.
Zur Drupal Versionen 8.x konnte ich noch keine Foreneinträge finden, daher jetzt hier was mir aufgefallen ist.
Bei der Installation von Drupal 8.1.2 kommt es zu einem Error.
Beheben kann man dies mit einer .php.ini > “memory_limit = 64M”
Nach der Installation, findet man eine css-lose Startseite von drupal vor. Folgt man den css links im Quelltext, folgt diese Nachricht
[code]
500 Internal Server ErrorInternal Server Error
The server encountered an internal error due to .htaccess misconfiguration.
Please check your .htaccess file within this or upper directories for syntax errors.
Diese Anfrage konnte auf Grund eines .htaccess Konfigurationsfehlers nicht bearbeitet werden.
Die Überprüfung auf Syntaxfehler in der .htaccess-Datei in diesem oder einem übergeordneten Ordner ist erforderlich.
Apache/2.4 Server at ***.bplaced.net Port 80 [/code]
Damit das CSS funktioniert, muss man die .htaccess in /sites/default/files (nicht die im Rootverzeichnis) bearbeiten. Löscht man “… -Includes -ExecCGI -MultiViews” aus der zweiten Zeile heraus, funktioniert CSS. Nur -MultiViews reicht nicht. Aber es gibt noch mehr!
Man kann nämlich auch nicht auf sämtliche backend Seiten zugreifen. Wie zB.: ***.bplaced.net/admin/content
Der entsprechende Error:The website encountered an unexpected error. Please try again later.
http://eass.bplaced.net/47-Drupal - Beschreibt die .htaccess Datei im Rootverzeichnis. Welche (v8.1.2) aber weder Options -MultiViews noch Options +FollowSymlinks beinhaltet. Den Inhalt dieser habe ich ans Ende des Beitrags kopiert.
Die einzige andere .htaccess Datei die ich noch ausmachen konnte, befindet sich in /vendor/. Diese hat auch eine Zeile mit Options -Multiview. Das herauskommentieren dieser scheint aber keinen Effekt zu haben.
Vielleicht kann ein erfahrener admin das Problem erkennen 
Andernfalls kann ich noch mehr Informationen hinzufügen.
.htaccess in /vendor
[code]# Deny all requests from Apache 2.4+.
Require all denied
Deny all requests from Apache 2.0-2.2.
<IfModule !mod_authz_core.c>
Deny from all
Turn off all options we don’t need.
Options -Indexes -ExecCGI -Includes -MultiViews <<<<<<<<<<<<<<<<
Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
<Files *>
Override the handler again if we’re run later in the evaluation list.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
If we know how to do it safely, disable the PHP engine entirely.
php_flag engine off [/code].htaccess in root
[code]
Apache/PHP/Drupal settings:
Protect files and directories from prying eyes.
<FilesMatch “.(engine|inc|install|make|module|profile|po|sh|.sql|theme|twig|tpl(.php)?|xtmpl|yml)(~|.sw[op]|.bak|.orig|.save)?$|^(.(?!well-known).|Entries.|Repository|Root|Tag|Template|composer.(json|lock))$|^#.#$|.php(~|.sw[op]|.bak|.orig|.save)$”>
Require all denied
<IfModule !mod_authz_core.c>
Order allow,deny
Don’t show directory listings for URLs which map to a directory.
Options -Indexes
Set the default handler.
DirectoryIndex index.php index.html index.htm
Add correct encoding for SVGZ.
AddType image/svg+xml svg svgz
AddEncoding gzip svgz
Most of the following PHP settings cannot be changed at runtime. See
sites/default/default.settings.php and
Drupal\Core\DrupalKernel::bootEnvironment() for settings that can be
changed at runtime.
PHP 5, Apache 1 and 2.
php_value assert.active 0 php_flag session.auto_start off php_value mbstring.http_input pass php_value mbstring.http_output pass php_flag mbstring.encoding_translation off # PHP 5.6 has deprecated $HTTP_RAW_POST_DATA and produces warnings if this is # not set. php_value always_populate_raw_post_data -1Requires mod_expires to be enabled.
# Enable expirations. ExpiresActive OnCache all files for 2 weeks after access (A).
ExpiresDefault A1209600
<FilesMatch .php$>
# Do not allow PHP scripts to be cached unless they explicitly send cache
# headers themselves. Otherwise all scripts would have to overwrite the
# headers set by mod_expires if they want another caching behavior. This may
# fail if an error occurs early in the bootstrap process, and it may cause
# problems if a non-Drupal PHP file is installed in a subdirectory.
ExpiresActive Off
Set a fallback resource if mod_rewrite is not enabled. This allows Drupal to
work without clean URLs. This requires Apache version >= 2.2.16. If Drupal is
not accessed by the top level URL (i.e.: http://example.com/drupal/ instead of
http://example.com/), the path to index.php will need to be adjusted.
<IfModule !mod_rewrite.c>
FallbackResource /index.php
Various rewrite rules.
RewriteEngine onSet “protossl” to “s” if we were accessed via https://. This is used later
if you enable “www.” stripping or enforcement, in order to ensure that
you don’t bounce between http and https.
RewriteRule ^ - [E=protossl]
RewriteCond %{HTTPS} on
RewriteRule ^ - [E=protossl:s]
Make sure Authorization HTTP header is available to PHP
even when running as CGI or FastCGI.
RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
Block access to “hidden” directories whose names begin with a period. This
includes directories used by version control systems such as Subversion or
Git to store control files. Files whose names begin with a period, as well
as the control files used by CVS, are protected by the FilesMatch directive
above.
NOTE: This only works when mod_rewrite is loaded. Without mod_rewrite, it is
not possible to block access to entire directories from .htaccess because
is not allowed here.
If you do not have mod_rewrite installed, you should remove these
directories from your webroot or otherwise protect them from being
downloaded.
RewriteRule “(^|/).(?!well-known)” - [F]
If your site can be accessed both with and without the ‘www.’ prefix, you
can use one of the following settings to redirect users to your preferred
URL, either WITH or WITHOUT the ‘www.’ prefix. Choose ONLY one option:
To redirect all users to access the site WITH the ‘www.’ prefix,
(http://example.com/foo will be redirected to http://www.example.com/foo)
uncomment the following:
RewriteCond %{HTTP_HOST} .
RewriteCond %{HTTP_HOST} !^www. [NC]
RewriteRule ^ http%{ENV:protossl}://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
To redirect all users to access the site WITHOUT the ‘www.’ prefix,
(http://www.example.com/foo will be redirected to http://example.com/foo)
uncomment the following:
RewriteCond %{HTTP_HOST} ^www.(.+)$ [NC]
RewriteRule ^ http%{ENV:protossl}://%1%{REQUEST_URI} [L,R=301]
Modify the RewriteBase if you are using Drupal in a subdirectory or in a
VirtualDocumentRoot and the rewrite rules are not working properly.
For example if your site is at http://example.com/drupal uncomment and
modify the following line:
RewriteBase /drupal
If your site is running in a VirtualDocumentRoot at http://example.com/,
uncomment the following line:
RewriteBase /
Redirect common PHP files to their new locations.
RewriteCond %{REQUEST_URI} ^(.)?/(install.php) [OR]
RewriteCond %{REQUEST_URI} ^(.)?/(rebuild.php)
RewriteCond %{REQUEST_URI} !core
RewriteRule ^ %1/core/%2 [L,QSA,R=301]
Rewrite install.php during installation to see if mod_rewrite is working
RewriteRule ^core/install.php core/install.php?rewrite=ok [QSA,L]
Pass all requests not referring directly to files in the filesystem to
index.php.
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !=/favicon.ico
RewriteRule ^ index.php [L]
For security reasons, deny access to other PHP files on public sites.
Note: The following URI conditions are not anchored at the start (^),
because Drupal may be located in a subdirectory. To further improve
security, you can replace ‘!/’ with ‘!^/’.
Allow access to PHP files in /core (like authorize.php or install.php):
RewriteCond %{REQUEST_URI} !/core/[^/]*.php$
Allow access to test-specific PHP files:
RewriteCond %{REQUEST_URI} !/core/modules/system/tests/https?.php
Allow access to Statistics module’s custom front controller.
Copy and adapt this rule to directly execute PHP files in contributed or
custom modules or to run another PHP application in the same directory.
RewriteCond %{REQUEST_URI} !/core/modules/statistics/statistics.php$
Deny access to any other PHP files that do not match the rules above.
Specifically, disallow autoload.php from being served directly.
RewriteRule “^(.+/.*|autoload).php($|/)” - [F]
Rules to correctly serve gzip compressed CSS and JS files.
Requires both mod_rewrite and mod_headers to be enabled.
# Serve gzip compressed CSS files if they exist and the client accepts gzip. RewriteCond %{HTTP:Accept-encoding} gzip RewriteCond %{REQUEST_FILENAME}\.gz -s RewriteRule ^(.*)\.css $1\.css\.gz [QSA]# Serve gzip compressed JS files if they exist and the client accepts gzip.
RewriteCond %{HTTP:Accept-encoding} gzip
RewriteCond %{REQUEST_FILENAME}\.gz -s
RewriteRule ^(.*)\.js $1\.js\.gz [QSA]
# Serve correct content types, and prevent mod_deflate double gzip.
RewriteRule \.css\.gz$ - [T=text/css,E=no-gzip:1]
RewriteRule \.js\.gz$ - [T=text/javascript,E=no-gzip:1]
<FilesMatch "(\.js\.gz|\.css\.gz)$">
# Serve correct encoding type.
Header set Content-Encoding gzip
# Force proxies to cache gzipped & non-gzipped css/js files separately.
Header append Vary Accept-Encoding
</FilesMatch>
