Comments on: Htaccess – The Ultimate Guide

By: Casey Dwayne

Casey Dwayne — Mon, 15 Apr 2013 23:25:00 +0000

Awesome article. Thanks for the great resource.

By: Abimo Corde

Abimo Corde — Mon, 15 Apr 2013 14:38:00 +0000

Superb! Thanks

By: Cam

Cam — Tue, 05 Feb 2013 23:23:36 +0000

I was recommended this web site by a friend.

I am not sure whether this post is written by him as no one else know
such detailed about my difficulty. You are amazing!
Thanks!

By: Peter Drinnan

Peter Drinnan — Fri, 25 Jan 2013 21:42:34 +0000

Awesome tutorials! Saved me hours. Thank you!

By: Sholac

Sholac — Tue, 22 Jan 2013 17:25:36 +0000

Hello I just find this website very useful! Thanks! After I had problems with attacks htaccess resolve my problems. I still got attacks but they are blocked. I put some things to my htaccess file of my wordpress website. Can you look over it and tell me is it good, so I can add it to all my websites. Here is code from htaccess ------------------------------------------------------------------------------------------------------------------------------

# STRONG HTACCESS PROTECTION
 
# BEGIN WordPress
 
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ â€“ [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
 
# END WordPress
 
RewriteCond %{QUERY_STRING} (\|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]
 
# directory browsing
Options All -Indexes
 
# QUERY STRING EXPLOITS
RewriteCond %{QUERY_STRING} ../ [NC,OR]
RewriteCond %{QUERY_STRING} boot.ini [NC,OR]
RewriteCond %{QUERY_STRING} tag= [NC,OR]
RewriteCond %{QUERY_STRING} ftp: [NC,OR]
RewriteCond %{QUERY_STRING} http: [NC,OR]
RewriteCond %{QUERY_STRING} https: [NC,OR]
RewriteCond %{QUERY_STRING} mosConfig [NC,OR]
RewriteCond %{QUERY_STRING} ^.*([|]|(|)||â€™|â€|;|?|*).* [NC,OR]
RewriteCond %{QUERY_STRING} ^.*(%22|%27|%3C|%3E|%5C|%7B|%7C).* [NC,OR]
RewriteCond %{QUERY_STRING} ^.*(%0|%A|%B|%C|%D|%E|%F|127.0).* [NC,OR]
RewriteCond %{QUERY_STRING} ^.*(globals|encode|config|localhost|loopback).* [NC,OR]
RewriteCond %{QUERY_STRING} ^.*(request|select|insert|union|declare|drop).* [NC]
RewriteRule ^(.*)$ â€“ [F,L]

---------------------------------------------------------------------------------------------------------------------------------------------------------------------- Thanks, I really appreciate your help here! Sholac

By: Noah

Noah — Tue, 27 Nov 2012 19:03:58 +0000

This is a fantastic resource. Thank you for all of the work you've put into compiling this cache of information. Most people overlook the protection and increase in usability some (comparatively) simple server rules have to offer.

Puns intended, you're the man.

By: Bridgette

Bridgette — Sun, 25 Nov 2012 19:59:32 +0000

Nice blog here! Also your site loads up fast! What web host are you using?

Can I get your affiliate link to your host? I wish my site loaded up as quickly as yours lol

By: klobirne

klobirne — Sun, 02 Sep 2012 18:57:59 +0000

I'm extremely impressed with your writing skills as well as with the layout on your weblog. Is this a paid theme or did you customize it yourself? Either way keep up the excellent quality writing, it's rare to see a nice blog like this one today.

By: mleenen

mleenen — Sat, 31 Mar 2012 09:30:32 +0000

I have a .htaccess with the following 3 lines:

Deny from all
ErrorDocument 404 "404 means not found."
ErrorDocument 403 "403 means forbidden."

This should block all access to any page. Right?

When I use: http://localhost/index.php, my own 403 is returned. However, when I use http://localhost/index.php the 'standard' error document is returned.

How can I make sure that in all cases, my own customized 403 is returned?

By: wel

wel — Fri, 16 Dec 2011 05:37:50 +0000

Hi Sir,

Really appreciated this your post. A true manifestation of a what a computer scientist is. Hard work.

Cheers.