Htaccess examples (security) - Revision history

Hutchy68: displaytitle to make htaccess lowercase

2012-10-15T12:13:48Z

displaytitle to make htaccess lowercase

Mandville: Protected "Htaccess examples (security)": Counter-productive edit warring ([edit=sysop] (expires 00:42, 28 February 2012 (UTC)) [move=sysop] (expires 00:42, 28 February 2012 (UTC)))

2012-01-28T00:42:42Z

Protected "Htaccess examples (security)": Counter-productive edit warring ([edit=sysop] (expires 00:42, 28 February 2012 (UTC)) [move=sysop] (expires 00:42, 28 February 2012 (UTC)))

Phild: Undo revision 64362 by Ahmad (talk) PhilD

2012-01-27T23:33:39Z

Undo revision 64362 by Ahmad (talk) PhilD

Show changes

Ahmad: /* Suggested Master htaccess file */ Updated the file version from Nicholas Dionysopoulos SVN

2012-01-22T11:03:15Z

‎Suggested Master htaccess file: Updated the file version from Nicholas Dionysopoulos SVN

Show changes

Isidrobaq: /* External links */

2011-10-03T14:31:15Z

‎External links

Phild: /* Suggested Master htaccess file */ added line (297) to explicitly allow the forum post assistant (fpa-xx) script to run

2011-09-13T23:34:24Z

‎Suggested Master htaccess file: added line (297) to explicitly allow the forum post assistant (fpa-xx) script to run

G1smd: Proposed 2.5.5 - Change rule order to prevent URL request with query string exploit accidentally being allowed when a previous "RewriteRule - [L]" exception stopped processing of request "too early".

2011-05-17T21:02:22Z

Proposed 2.5.5 - Change rule order to prevent URL request with query string exploit accidentally being allowed when a previous "RewriteRule - [L]" exception stopped processing of request "too early".

G1smd: Proposed 2.5.4 - Change rule order to prevent URL request with exploit accidentally being allowed when a previous "RewriteRule - [L]" exception has stopped the processing of that request "too early".

2011-05-17T20:54:21Z

Proposed 2.5.4 - Change rule order to prevent URL request with exploit accidentally being allowed when a previous "RewriteRule - [L]" exception has stopped the processing of that request "too early".

G1smd: Proposed 2.5.3 - Changing rule order such that mod_rewrite and other setup code is placed closer to the rules that it applies to and is therefore easier to follow.

2011-05-17T20:45:37Z

Proposed 2.5.3 - Changing rule order such that mod_rewrite and other setup code is placed closer to the rules that it applies to and is therefore easier to follow.

G1smd: Proposed 2.5.2 - Redirecting a malicious request only to later block it is inefficient. Move external redirect mod_rewrite code to be after the mod_rewrite code which blocks malicious requests.

2011-05-17T20:41:40Z

Proposed 2.5.2 - Redirecting a malicious request only to later block it is inefficient. Move external redirect mod_rewrite code to be after the mod_rewrite code which blocks malicious requests.

← Older revision		Revision as of 12:13, 15 October 2012
Line 1:		Line 1:
−	__TOC__	+	{{DISPLAYTITLE:htaccess examples (security)}}__TOC__
	''Credit for part of this .htaccess file goes to Ronald van den Heetkamp''		''Credit for part of this .htaccess file goes to Ronald van den Heetkamp''

@@ Line 589: / Line 589: @@
 [http://perishablepress.com/press/tag/htaccess/ .htaccess tag archive @ perishablepress.com]
-[http://snipt.net/nikosdion/the-master-htaccess Proposed "master htaccess" (updated by Nicholas on November 18th 2010 to v2.3) DO read the intro by Nicholas!]
+[http://akeeba.assembla.com/code/master-htaccess/git/nodes/htaccess.txt Proposed "master htaccess" (updated by Nicholas on April 24th 2011 to v3.3) DO read the intro by Nicholas!]
 [[Category:Security]]

@@ Line 433: / Line 433: @@
 RewriteCond %{REQUEST_FILENAME} \.php$
 RewriteCond %{REQUEST_FILENAME} !/index[23]?\.php$
 RewriteCond %{REQUEST_FILENAME} -f
 RewriteRule ^([^/]+/)*([^/.]+\.)+php$ - [F]

@@ Line 140: / Line 140: @@
 ## The Master .htaccess
 ##
-## Version 2.5 (proposed) - May 14th, 2011
+## Version 2.5 (proposed) - May 16th, 2011
 ##
 ## ----------
@@ Line 184: / Line 184: @@
 ##
 ## CHANGELOG:
-## Version 2.5 (proposed) (May 14th, 2011)
+## Version 2.5 (proposed) (May 16th, 2011)
 ## - Placeholders for custom code. Correction of ruleset ordering.
 ## Version 2.4 (April 18th, 2011)
@@ Line 319: / Line 319: @@
 ## where "badword" is the word you want to exclude.
 ########## End - Basic antispam Filter, by SigSiu.net
 ########## Begin - Advanced server protection rules exceptions ####
@@ Line 356: / Line 399: @@
 ########## End - Advanced server protection rules exceptions ####
-########## Begin - Advanced server protection
+########## Begin - Advanced server protection - paths and files
-# Advanced server protection, version 3.1 - April 2011
+# Advanced server protection, version 3.2 - May 2011
 # by Nicholas K. Dionysopoulos
 ## Back-end protection
@@ Line 430: / Line 436: @@
 RewriteRule ^([^/]+/)*([^/.]+\.)+php$ - [F]
-########## End - Advanced server protection
+########## End - Advanced server protection - paths and files
 ########## Begin - Google Apps redirection, by Komra.de

@@ Line 140: / Line 140: @@
 ## The Master .htaccess
 ##
-## Version 2.5 (proposed) - May 13th, 2011
+## Version 2.5 (proposed) - May 14th, 2011
 ##
 ## ----------
@@ Line 184: / Line 184: @@
 ##
 ## CHANGELOG:
-## Version 2.5 (proposed) (May 13th, 2011)
+## Version 2.5 (proposed) (May 14th, 2011)
 ## - Placeholders for custom code. Correction of ruleset ordering.
 ## Version 2.4 (April 18th, 2011)
@@ Line 303: / Line 303: @@
 RewriteRule .* - [F]
 ########## End - File injection protection
 ########## Begin - Advanced server protection rules exceptions ####
@@ Line 343: / Line 359: @@
 # Advanced server protection, version 3.1 - April 2011
 # by Nicholas K. Dionysopoulos
 ## Referrer filtering for common media files. Replace with your own domain name.
@@ Line 362: / Line 395: @@
 RewriteRule .* - [L]
 RewriteCond %{QUERY_STRING} (^|&)t(p|emplate|mpl)= [NC]
 RewriteRule .* - [F]
@@ Line 402: / Line 429: @@
 RewriteCond %{REQUEST_FILENAME} -f
 RewriteRule ^([^/]+/)*([^/.]+\.)+php$ - [F]
 ########## End - Advanced server protection
 ########## Begin - Google Apps redirection, by Komra.de

@@ Line 140: / Line 140: @@
 ## The Master .htaccess
 ##
-## Version 2.5 (proposed) - May 11th, 2011
+## Version 2.5 (proposed) - May 12th, 2011
 ##
 ## ----------
@@ Line 184: / Line 184: @@
 ##
 ## CHANGELOG:
-## Version 2.5 (proposed) (May 11th, 2011)
+## Version 2.5 (proposed) (May 12th, 2011)
 ## - Placeholders for custom code. Correction of ruleset ordering.
 ## Version 2.4 (April 18th, 2011)
@@ Line 318: / Line 318: @@
 AddOutputFilterByType DEFLATE text/plain text/html text/xml text/css application/xml application/xhtml+xml application/rss+xml application/javascript application/x-javascript
 ########## End - Automatic compression of resources
 ########## Begin - Add optional bad user agent or IP blocking code
@@ Line 549: / Line 487: @@
 ## where "badword" is the word you want to exclude.
 ########## End - Basic antispam Filter, by SigSiu.net
 ########## Begin - Custom internal rewrites