# Web Server Redirect Rules

  **Recommended**  
 Ensuring redirection rules are correctly enabled is critical to prevent unauthorised access to sensitive file stores. 

 All URLs served by SupportPal **should not** include `/index.php` within them. If your URLs contain `/index.php` then our web server redirection rules are not enabled or are misconfigured.

## Web Servers

#### Apache

 SupportPal ships with a `.htaccess` file. If the included `.htaccess` file doesn't work automatically, you may need to set the [`AllowOverride` directive](https://httpd.apache.org/docs/current/mod/core.html#allowoverride) in the Apache configuration to `All` and ensure that the `mod_rewrite` module is enabled.

#### Other web servers

 Use and adapt our example configurations found at [System Requirements](System+Requirements#WebServer).

## Enable Pretty URLs

Once the redirect rules are working, make sure to toggle the *Settings* > *Pretty URLs* field if it is not already enabled. This will ensure the system generates links without `/index.php` included in the URL.