What are common mod_rewrite flags?

[L] stands for Last rule (stops processing further rules if matched), [R=301] issues an HTTP 301 Permanent Redirect, [NC] indicates No Case (case-insensitive regex matching), and [QSA] means Query String Append.

Why is Options +Indexes dangerous in Apache?

Options +Indexes allows Apache to render an auto-generated HTML directory listing whenever an index.html file is missing, exposing sensitive backups, logs, and internal source code.

Apache Configuration Inspector & Rewrite Rule Tester

Inspect Apache httpd.conf and .htaccess directives. Decode complex mod_rewrite regular expressions, simulate URL routing, and audit server security configurations offline.

Test Incoming URL Path:

APACHE CONFIG / .HTACCESS 0 lines

DECODED RULES & SECURITY AUDIT 0 rules identified

Click "Inspect Directives" to analyze Apache rules and settings.

Frequently Asked Questions

How does URL simulation work?

The tester compiles each RewriteRule regex in order. When a simulated URL matches the pattern (and preceding RewriteCond conditions), it performs group replacement (e.g. $1) and outputs the destination URL.

What security settings should an Apache server use?

Recommended settings include Options -Indexes (prevents directory listings), ServerTokens Prod (hides Apache version), ServerSignature Off (removes signature from error pages), and setting Header always set X-Frame-Options "SAMEORIGIN".