diff --git a/e107.htaccess b/e107.htaccess
index 06a448a10..5af85c4e5 100644
--- a/e107.htaccess
+++ b/e107.htaccess
@@ -7,38 +7,49 @@
ErrorDocument 500 /error.php?500
+### Performance
+ AddDefaultCharset utf-8
+
+### Security
+ ServerSignature Off
+
# secure htaccess file
-order allow,deny
-deny from all
+ order allow,deny
+ deny from all
# protect e107_config.php
-order allow,deny
-deny from all
+ order allow,deny
+ deny from all
-# Block Bad Bots
-# SetEnvIfNoCase ^User-Agent$ .*(craftbot|download|extract|stripper|sucker|ninja|clshttp|webspider|leacher|collector|grabber|webpictures) HTTP_SAFE_BADBOT
-# SetEnvIfNoCase ^User-Agent$ .*(libwww-perl|aesop_com_spiderman) HTTP_SAFE_BADBOT
-# Deny from env=HTTP_SAFE_BADBOT
+### Block Bad Bots
+ SetEnvIfNoCase ^User-Agent$ .*(craftbot|download|extract|stripper|sucker|ninja|clshttp|webspider|leacher|collector|grabber|webpictures) HTTP_SAFE_BADBOT
+ SetEnvIfNoCase ^User-Agent$ .*(libwww-perl|aesop_com_spiderman) HTTP_SAFE_BADBOT
+ Deny from env=HTTP_SAFE_BADBOT
-# Disable directory browsing
-Options All -Indexes
+### Disable directory listing
+ Options All -Indexes
-# limit file uploads to 10mb
-# LimitRequestBody 10240000
+### limit file uploads to 10mb
+### LimitRequestBody 10240000
### enable rewrites
Options +FollowSymLinks
RewriteEngine On
+
### Set this to your e107 site root, path relative to web root
### Uncomment it in case your server isn't able to rewrite proper
#RewriteBase /
+
+### Allow only GET and POST methods
+ RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS|HEAD)
+ RewriteRule .* - [F]
### send 404 on missing files in these folders
RewriteCond %{REQUEST_URI} !^/(e107_images|e107_files)/