I discovered these tips and tricks mostly while working as a network security penetration specialist hired to find security holes in web hosting environments. That is when I started examining htaccess files in great detail and learned about the incredible untapped power of htaccess. The only avenue on shared-hosting was and is the .htaccess file, and holy freaking fiber-optics.. it's almost as powerful as httpd.conf itself

The post Htaccess – The Ultimate Guide appeared first on AskApache.

Want to redirect all links with any uppercase characters to lowercase using pure mod_rewrite within an .htaccess file? Sure why not! OR how to use RewriteMap and mod_speling for those with access to httpd.conf

The post Htaccess Rewrite for Redirecting Uppercase to Lowercase appeared first on AskApache.

So here's the basic idea: There are 2 sites, a development site and a live site. They are essentially mirrors of each other in terms of they have the same files. You need to disallow all search engine robots from indexing and crawling the development site, while allowing full crawling of your live site. Htaccess to the rescue!

The post Alternate robots.txt files with Htaccess appeared first on AskApache.

Use mod_rewrite to enable phpMyAdmin links in the form: /dbname/table/

The post phpMyAdmin Shortcuts with .htaccess appeared first on AskApache.

The story behind this plugin is sorta wack, but in a good way :). While doing tons of security research on permissions, authorization, access, etc.. for the Password Protection plugin (still being worked on), I needed to have unheard of debugging capabilities while working on the plugin on the various websites, webhosts, and test servers that I use to test in different environments. So I hacked together a bunch of php code that helped me debug, actually I pretty much went overkill and tried to get as much debugging info as programmatically possible, and it ended up being so much code that I took it out of my Password Protection code and made it its own plugin.

The post AskApache Debug Viewer Plugin for WordPress appeared first on AskApache.

We've figured out what mod_rewrite variables look like, a cheatsheet of the actual value.

The post Mod_Rewrite Variables Cheatsheet appeared first on AskApache.

Quick and easy method to get a list of all Apache Modules currently loaded, a list of all the directives each module provides, a list of currently used directives, etc... These directives can be used in httpd.conf and/or .htaccess files so it is definately useful to know which ones are available and which ones are currently being used.

The post Mod_Status tricks to View Apache Module Directives appeared first on AskApache.

Problem: WordPress shows pages, categories, author pages, etc. without an ending '/'.
/about instead of /about/.
/category/htaccess instead of /category/htaccess/.

Solution: Either hook into the user_trailingslashit filter, or use some htaccess RedirectMatch

The post Adding a Trailing "/" to WordPress Permalinks appeared first on AskApache.

These are a few of the mod_rewrite uses that BlogSecurity declared pushed the boundaries of Mod_Rewrite! Some of these snippets are quite exotic and unlike anything you may have seen before, also only for those who understand them as they can kill a website pretty quick.

The post Mod_Rewrite Security appeared first on AskApache.

WordPress uses a file named .htaccess to rewrite all requests to the main index.php file. This article explains what the htaccess file rules look like and what they actually do.

The post WordPress .htaccess in-depth appeared first on AskApache.