https://www.icyphoenix.com/viewtopic.php?f=4&t=2682&p=18972#p18972 ----------------------------------- novice programmer Sun 26 Aug, 2007 21:36 Re: Modify Php Settings With .htaccess File ----------------------------------- [quote user="Mighty Gorgon" post="18933"]Thanks, it is really useful, I'll move to docs section. [quote user="novice programmer" post="18932"]MG, have you thought about, in the file .htaccess, add something to block the characters below? [code linenumbers=false] ",',<,>,{,},[,] [/code][/quote] Why should I block these? Not all of these requests may be dangerous... :roll: I can't lock all these kind of requests, because someone may need them for other scripts on their sites.[/quote] About the < and >: With the you can insert a script at the adress. I konw you have blocked all script tags on the url, but it could be ofuscated... it´ll become this way: . For my POV this is a security issue. For possible hackers: The numbers have been selected at ramdom, and them won´t work in a page. About the ': I know ctraker blocks them, but if someone can insert into the url a code for not-ctraker loading... About the ": Php code could being edited with them And about the { and }: I don´t know any page which use them, so they could be blocked. MG, if you found this risky, you can upload them as a customization, so users could decide. You can add this to the acronyms: POV = Point Of View