Icy Phoenix

     
 

Home » Forum » Icy Phoenix Support » Older Versions Archive » Old Support Topics

The time now is Fri 30 May, 2025 23:11 • All times are UTC + 1 Hour [DST enabled]
View previous topic Recent Topics Enable KB mode Download Topic Printable Version Email to a Friend View next topic

Extra Script For .htaccess


Post new topic  This topic is locked: you cannot edit posts or make replies.  		Page 1 of 1
 
 
Offline jz Male
The Daddy
avatar
Joined: August 2006
Posts: 217
Location: uk.png London
 
 
Reply with quote Download Post 
Post Extra Script For .htaccess 
 
Hi there,

I was wondering if it was worth adding the code below to the .htaccess file, or is it already featured?

Code: [Download] [Hide] [Select]
########## Begin - Rewrite rules to block out some common exploits
#                              
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|[|%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|[|%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits

 



 
#1  Mon 08 Jan, 2007 00:02
jzSend private message  
Back to topPage bottom
Sponsors
Icy Phoenix is an open source project, you can show your appreciation and support future development by donating to the project.

Support us
 
Offline Mighty Gorgon Male
Luca Libralato
Site Admin
avatar
Joined: August 2006
Posts: 7192
Location: italia.png Borgo San Michele
 
 
Reply with quote Download Post 
Post Re: Extra Script For .htaccess 
 
Good suggestion... added...
 




____________
Luca
SEARCH is the quickest way to get support.
Icy Phoenix ColorizeIt - CustomIcy - HON
 
#2  Mon 08 Jan, 2007 14:36
Mighty GorgonSend private messageSend e-mail to userVisit poster's website  
Back to topPage bottom
Offline jz Male
The Daddy
avatar
Joined: August 2006
Posts: 217
Location: uk.png London
 
 
Reply with quote Download Post 
Post Re: Extra Script For .htaccess 
 
Here's a few more Spam Bots
Code: [Download] [Hide]
  1. RewriteCond %{HTTP_REFERER} ^(.*)appraiserseek.com(.*)$ [OR]  
  2. RewriteCond %{HTTP_REFERER} ^(.*)beyonddc.com(.*)$ [OR]  
  3. RewriteCond %{HTTP_REFERER} ^(.*)soltyra.com(.*)$ [OR]  
  4. RewriteCond %{HTTP_REFERER} ^(.*)wrongsideoftown.com(.*)$ [OR]  
  5. RewriteCond %{HTTP_REFERER} ^(.*)estranky.cz(.*)$ [OR]  
  6. RewriteCond %{HTTP_REFERER} ^(.*)bramjnet.com(.*)$ [OR]  
  7. RewriteCond %{HTTP_REFERER} ^(.*)voila.fr(.*)$ [OR]  
  8. RewriteCond %{HTTP_REFERER} ^(.*)anonym.to(.*)$ [OR]  
  9. RewriteCond %{HTTP_REFERER} ^(.*)infobox.ru(.*)$ [OR]  
  10. RewriteCond %{HTTP_REFERER} ^(.*)porndors.com(.*)$ [OR]  
  11. RewriteCond %{HTTP_REFERER} ^(.*)atspace.com(.*)$ [OR]  
  12. RewriteCond %{HTTP_REFERER} ^(.*)funpic.de(.*)$ [OR]  
  13. RewriteCond %{HTTP_REFERER} ^(.*)skynet.be(.*)$ [OR]  
  14. RewriteCond %{HTTP_REFERER} ^(.*)kokoom.com(.*)$ [OR]  
  15. RewriteCond %{HTTP_REFERER} ^(.*)jeeran.com(.*)$ [OR]  
  16. RewriteCond %{HTTP_REFERER} ^(.*)blog.cz(.*)$ [OR]  
  17. RewriteCond %{HTTP_REFERER} ^(.*)forumw.org(.*)$ [OR]  
  18. RewriteCond %{HTTP_REFERER} ^(.*)gfxgfx.net(.*)$ [OR]  
  19. RewriteCond %{HTTP_REFERER} ^(.*)fateback.com(.*)$ [OR]  
  20. RewriteCond %{HTTP_REFERER} ^(.*)volny.cz(.*)$ [OR]  
  21. RewriteCond %{HTTP_REFERER} ^(.*)thecanalgallery.com(.*)$ 

 



 
#3  Mon 08 Jan, 2007 18:15
jzSend private message  
Back to topPage bottom
Offline Mighty Gorgon Male
Luca Libralato
Site Admin
avatar
Joined: August 2006
Posts: 7192
Location: italia.png Borgo San Michele
 
 
Reply with quote Download Post 
Post Re: Extra Script For .htaccess 
 
Thanks... too late for the beta, but ok for next release...
 




____________
Luca
SEARCH is the quickest way to get support.
Icy Phoenix ColorizeIt - CustomIcy - HON
 
#4  Mon 08 Jan, 2007 18:42
Mighty GorgonSend private messageSend e-mail to userVisit poster's website  
Back to topPage bottom
Offline jz Male
The Daddy
avatar
Joined: August 2006
Posts: 217
Location: uk.png London
 
 
Reply with quote Download Post 
Post Re: Extra Script For .htaccess 
 
No prob,

untill the final I'll probable have a few more
 



 
#5  Thu 11 Jan, 2007 00:51
jzSend private message  
Back to topPage bottom
Offline Mighty Gorgon Male
Luca Libralato
Site Admin
avatar
Joined: August 2006
Posts: 7192
Location: italia.png Borgo San Michele
 
 
Reply with quote Download Post 
Post Re: Extra Script For .htaccess 
 
jz wrote: [View Post]
No prob,

untill the final I'll probable have a few more

We are waiting for them...
 




____________
Luca
SEARCH is the quickest way to get support.
Icy Phoenix ColorizeIt - CustomIcy - HON
 
#6  Thu 11 Jan, 2007 02:31
Mighty GorgonSend private messageSend e-mail to userVisit poster's website  
Back to topPage bottom
Post new topic  This topic is locked: you cannot edit posts or make replies.  Page 1 of 1
 


Display posts from previous:    

HideWas this topic useful?

Link this topic
URL
BBCode
HTML

Home » Forum » Icy Phoenix Support » Older Versions Archive » Old Support Topics

The time now is Fri 30 May, 2025 23:11 • All times are UTC + 1 Hour [DST enabled]
View previous topic Recent Topics Enable KB mode Download Topic Printable Version Email to a Friend View next topic




 
Permissions List
You cannot post new topics
You cannot reply to topics
You cannot edit your posts
You cannot delete your posts
You cannot vote in polls
You cannot attach files
You can download files
You cannot post calendar events

  

 
 Powered by Icy Phoenix based on phpBB
Lo-Fi Version - Privacy Policy - Cookie Policy
Generation Time: 0.3657s (PHP: 7% SQL: 93%)
SQL queries: 29 - Debug Off - GZIP Enabled
Design by Luca Libralato 
  cron