https://www.icyphoenix.com/viewtopic.php?f=4&t=392&p=3195#p3195
-----------------------------------
moreteavicar
Fri 22 Sep, 2006 01:02

Re: About .htaccess paths!
-----------------------------------
No, you don't replace anything here. The condition is looking for you *edit... not neccessarily you but a hacker* trying to parse to the variables phpbb_root_path, album_root_path, module_root_path, mx_root_path and upi2db_file_path, these are actual variables in XS, and somebody might be trying to write to the query string yousite.com/somepage.php?mx_root_path=www.nasty.peoples.website.ru/nastyfile.php
The Query string means whatever is between ? and =

The syntax of .htaccess is nothing like php, but a wierd mix of pearl regex syntax, and some c++/php style boloean. I still don't understand it fully... and have to regularly resort to http://httpd.apache.org/docs/1.3/mod/mod_rewrite.html 

What MG has come up with here is nice and simple, yet completely failsafe (with one exception... if you don't have apache, or you do, but don't have mod rewrite!).


