mod_rewrite for security

[cleaner416]

First off, I am a mod_rewrite newbie...apologies in advance.

Essentially I want to use mod_rewrite to hide .php extensions. For example, I want

http://www.mydomain.com/foo

to redirect internally to foo.php. I need the rule constructed so that /foobar/ will still go to /foobar/, to keep the directories intact. I also want to make sure the whole scheme keeps working with GET and POST variables, cookies and sessions. I need to do this within an .htaccess file.

I can't seem to get the syntax right for this one...any help would be greatly appreciated.

Thanks in advance!

 

[siberian]

Maybe :

RewriteCond %{REQUEST_FILENAME}.php -f
RewriteRule ^/(.*)$

http://yoursite.com/$1.php

[proxy]


The Cond rule should check 'Is this request + .php a file?'
If it passes you can do a proxy to yourself to get the file.

Possibly, I did not test this.