Security tip regarding .htaccess

Jochen · 2026-09-26T06:53:35+00:00

Hallo, ich habe mehrfach folgenden Sicherheits-Hinweis von HTProtect bekommen: [Datei verändert] Haupt-.htaccess wurde außerhalb von HTProtect geändert. Konkret abweichende Zeilen (- von HTProtect erwartet, + zusätzlich vorhanden): AddHandler application/x-httpd-ea-php72 .php .php7 .phtml Habe mir die htaccess angeschaut aber diese zusätzlichen Zeilen finde ich da nicht. Dieser Hinweis kam heute früh schon 4 Mal. Bin jetzt etwas unsicher was das bedeutet? Wäre für einen Hinweis dankbar. Gruß Jochen HTProtect 2.7,15 Joomla 5.4.8 PHP 8.2.33

Jochen

Hello,
I've received the following security alert from HTProtect several times:
[Datei verändert] Main .htaccess was changed outside of HTProtect.

Specifically, differing lines (- expected by HTProtect, + additionally present):

<IfModule mime_module>
AddHandler application/x-httpd-ea-php72 .php .php7 .phtml

I checked the htaccess file but can't find these extra lines there.
This alert popped up 4 times this morning already.
Now I'm a bit unsure what this means?
Would appreciate any hints.

Cheers
Jochen

HTProtect 2.7.15
Joomla 5.4.8
PHP 8.2.33

Pascal

Hi Jochen,

Is there a "+" (meaning additionally present) in the mail lines?

What kind of hosting is it exactly? Looks like cPanel, with the MultiPHP Manager?

And are you sure PHP 8.2 is set there and not 7.2? The webserver seems to write exactly that setting into the .htaccess.

See also the Google-Suchergebnisse in the cPanel forum.
If you set it to "Inherit" (server default PHP version), no AddHandler line should end up in the .htaccess.

In version 2.7.16, which will be released soon, this issue will be addressed. That should prevent endless loops of mail notifications and autoheal when cPanel edits the .htaccess accordingly. At most, only one mail regarding this change will come through - which will then be "accepted" as part of the .htaccess.

Cheers
Pascal

Jochen

Hi Pascal,
thanks for the quick reply. So the site is hosted with Serverprofis. Yes, they use cPanel there and I had PHP 8.2 set up. I can’t access the MultiPHP Manager there.
I’ll probably just send an email to the provider and ask why those lines are being added to my htaccess.

Cheers
Jochen

Pascal

OK. With the version just uploaded to the update server 2.7.16, such an email will now only be sent once, as mentioned.

Jochen

Thanks again for the info.
The provider has now responded and told me this shouldn’t happen anymore.

Cheers
Jochen