It's aaaaaalways the .htaccess file.

🏷 apache fml hacking htaccess