完整版全能优化 .htaccess

使用说明：直接复制下方全部代码，新建文件命名为 .htaccess 上传到网站根目录即可生效。

ErrorDocument 400  /
ErrorDocument 401  /
ErrorDocument 403  /
ErrorDocument 404  /
ErrorDocument 405  /
ErrorDocument 408  /
ErrorDocument 500  /
ErrorDocument 502  /
ErrorDocument 503  /
ErrorDocument 504  /
ErrorDocument 505  /


    DeflateCompressionLevel 6
    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css application/javascript application/json
    AddOutputFilterByType DEFLATE application/xml application/xhtml+xml application/rss+xml
    AddOutputFilterByType DEFLATE image/svg+xml application/x-font-ttf application/x-font-opentype
    BrowserMatch ^Mozilla/4 gzip-only-text/html
    BrowserMatch ^Mozilla/4\.0[678] no-gzip
    BrowserMatch \bMSIE !no-gzip !gzip-only-text/html



    ExpiresActive On
    ExpiresByType image/jpg "access plus 1 day"
    ExpiresByType image/jpeg "access plus 1 day"
    ExpiresByType image/gif "access plus 1 day"
    ExpiresByType image/png "access plus 1 day"
    ExpiresByType image/webp "access plus 1 day"
    ExpiresByType image/svg+xml "access plus 1 day"
    ExpiresByType text/css "access plus 1 day"
    ExpiresByType application/javascript "access plus 1 day"
    ExpiresByType text/javascript "access plus 1 day"
    ExpiresByType application/x-font-ttf "access plus 1 day"
    ExpiresByType application/x-font-opentype "access plus 1 day"
    ExpiresByType application/font-woff "access plus 1 day"
    ExpiresByType application/font-woff2 "access plus 1 day"
    ExpiresByType text/xml "access plus 1 day"
    ExpiresByType application/json "access plus 1 day"



    RewriteEngine On
    RewriteCond %{HTTPS} !=on
    RewriteCond %{SERVER_PORT} !^443$
    RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/ [NC]
    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]


Options -Indexes


    RewriteEngine On
    RewriteCond %{QUERY_STRING} (base64_encode|eval|union|select|insert|update|delete|drop|alter) [NC]
    RewriteRule .* - [F,L]



    Order Allow,Deny
    Deny from all
备注：
1. 本配置仅适用于 Apache 服务器，Nginx 不支持；
2. 上传到网站根目录生效，无需重启服务器；
3. 静态资源缓存时间统一为 1 天；
4. 包含错误页跳转、Gzip压缩、强制HTTPS、安全防护功能；
5. 若出现500错误，删除文件即可恢复正常。

📌 每段代码功能说明

1. ErrorDocument 404 / … → 网站出错自动跳首页
2. mod_deflate → 开启Gzip压缩，网页加载更快
3. mod_expires → 浏览器缓存图片、CSS、JS，节省流量
4. mod_rewrite HTTPS → 自动把http跳转到https
5. Options -Indexes → 禁止别人查看网站文件夹
6. 恶意关键词拦截 → 防SQL注入、黑客攻击
7. FilesMatch → 禁止访问敏感配置文件，提升安全
下一页