<IfModule mod_php5.c>
php_flag        display_errors  Off
php_flag        log_errors      On
php_value       error_log       syslog

php_flag        safe_mode      		On
php_flag        safe_mode_gid  		On
php_value 	open_basedir  		/var/www/board
php_value 	safe_mode_exec_dir	/var/empty
</IfModule>

<FilesMatch "^(database.*|remind.php|closevotes.php.*)$">
	Order Deny,Allow
	Deny from all
</FilesMatch>




<FilesMatch "^(motions?|vote|proxy)\.php$">
	# these files require authentication
	<IfModule mod_ssl.c>
	SSLOptions +OptRenegotiate +StdEnvVars +ExportCertData
	SSLUserName SSL_CLIENT_S_DN_Email
	SSLVerifyClient require
#		<IfModule mod_rewrite.c>
#		RewriteEngine        on
#		RewriteCond     %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
#		RewriteRule     .? - [F]
#		ErrorDocument 403 "You need a client side certificate issued by CAcert to access this url"
#		</IfModule>
	</IfModule>
</FilesMatch>
