hallo zusammen,
hat jemand in seiner htaccess dinge wie das nachfolgende für vb bzw. vbseo drin (sicherheit)
Code:RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR] # Block out any script trying to set a module value through the URL RewriteCond %{QUERY_STRING} module_[a-zA-Z_]{1,21}(=|\%3D) [OR] #IF the URI contains a "http:" or "ftp:" or "https" RewriteCond %{QUERY_STRING} http\: [OR] RewriteCond %{QUERY_STRING} http\%3A\%2F\%2F [OR] RewriteCond %{QUERY_STRING} ftp\: [OR] RewriteCond %{QUERY_STRING} https\: [OR] #OR if the URI contains a "[" RewriteCond %{QUERY_STRING} \[ [OR] #OR if the URI contains a "]" RewriteCond %{QUERY_STRING} \] [OR] # Block out any script trying to base64_encode crap to send via URL RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR] # Block out any script that includes a ********** tag in URL RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR] # Block out any script trying to set a PHP GLOBALS variable via URL RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR] # Block out any script trying to modify a _REQUEST variable via URL RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) # Send blocked request to homepage with 403 Forbidden error! RewriteRule ^(.*)$ index.php [F,L]


LinkBack URL
About LinkBacks





Reply With Quote
