Two .HTAccess files... do i need to use all two of them?

uxpascal · January 15, 2024, 7:42pm

Dear ModX-r’s,

I’m trying to get my site a bit better and saver, therefore I need to edit something in the .htaccess file (yes, outside MODx to keep it safe)
Now I noticed that I have two versions?! And not because of my own doing I think.
Screenshot 2024-01-15 at 20.26.00

.htaccess
.htaccess.preinstall

They both have a lot of info in them… which one should I use? and why?

Hope to hear form anyone that knows.

halftrainedharry · January 15, 2024, 7:50pm

I’ve never seen a .htaccess.preinstall file and it’s definitely not from MODX.
(In fact MODX only comes with a file ht.access, and you have to rename it to .htaccess yourself.)

My guess is, that the file .htaccess is the one that gets used.

uxpascal · January 15, 2024, 8:15pm

Can it be that the.htaccess.preinstall is the one I had and that Modx made me a new one during the installation?

halftrainedharry · January 15, 2024, 8:21pm

MODX only creates a file ht.access with this content:

github.com

modxcms/revolution/blob/73bfd2712427f46d9f32730b86f335fbe3296703/ht.access

# MODX supports Friendly URLs via this .htaccess file. You must serve web
# pages via Apache with mod_rewrite to use this functionality, and you must
# change the file name from ht.access to .htaccess.
#
# Make sure RewriteBase points to the directory where you installed MODX.
# E.g., "/modx" if your installation is in a "modx" subdirectory.
#
# You may choose to make your URLs non-case-sensitive by adding a NC directive
# to your rule: RewriteRule ^(.*)$ index.php?q=$1 [L,QSA,NC]

RewriteEngine On
RewriteBase /


# Prevent rewrite the .well-known directory used by LetsEncrypt by rules below of this rule
RewriteRule "^\.well-known/" - [L]


# Prevent dot directories (hidden directories like .git) to be exposed to the public
# Except for the .well-known directory used by LetsEncrypt a.o

This file has been truncated. show original

uxpascal · January 15, 2024, 8:43pm

I need a part that will do a redirect from http:// to https:// in the file… After I inserted this, the site gave a server error.

halftrainedharry · January 15, 2024, 8:50pm

This part (of the original MODX ht.access file) should do this

github.com

modxcms/revolution/blob/73bfd2712427f46d9f32730b86f335fbe3296703/ht.access#L38-L41


      
          # Force rewrite to https for every host
          #RewriteCond %{HTTPS} !=on [OR]
          #RewriteCond %{SERVER_PORT} !^443
          #RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

if you uncomment the lines 39-41.

uxpascal · February 2, 2024, 10:12am

I have the idea that the preinstall one is the original version I have had used before I moved over to MODx. So not sure if the MODx .htaccess content is added or that the original version is being ignored in total.