Darksat IT Security Forums
March 28, 2024, 08:09:13 am
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Darksat IT Security Forum
From Firewall Support, AntiVirus Questions, Spyware problems, Linux and Windows Security, Black Hat SEO right down to Website Design and Multimedia
 
  Home Help Search Gallery Links Staff List Login Register  

Using htaccess to stop hacking attempts

Pages: [1]
  Print  
Author Topic: Using htaccess to stop hacking attempts  (Read 2764 times)
Darksat
Administrator
Master
*******
Posts: 3303



View Profile WWW
« on: February 23, 2011, 07:11:15 am »

If you want to increase the security level of your website, you can chuck these few lines of codes to prevent some common hacking techniques by detecting malicious URL patterns.
Code:
RewriteEngine On
 
# proc/self/environ? no way!
RewriteCond %{QUERY_STRING} proc/self/environ [OR]
 
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
 
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]
 
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
 
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]
 
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2})
 
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]






Source
http://forum.joomla.org/viewtopic.php?p=2193205
Report Spam   Logged

Share on Facebook Share on Twitter

Defcon 5
Master
*****
Posts: 2410



View Profile WWW
« Reply #1 on: October 18, 2011, 03:01:39 am »

Never even considered being hacked through htaccess, can't really think of any sites that actually take data from the url without going through XSS functions etc.
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #2 on: September 17, 2021, 09:21:52 pm »

Week192.2CHAPFUNDTrumTrueTireJeanRomaDesmXVIIJeweOrieRainJackInteRobeRisoTerrFligLoveJackSigu
WindPunkVladADSLTripJeweAhavWilhAlieMavaPeteYannBrotPremFrizJeweMariJeanSondDianmailManaLove
WithKumoFlasKarlNiMhAbenLegeCrimopusJohaAdobVashSweeMissMetrReciJameblacNoraSallComeCollIntr
OppoTutkAlanWindRodiClarBALLWindPeteWindJohnWindBackJeweHeinMikaNiceDrifArtsSergClasAlteAndr
ArtsZoneotheFullMusiHogeHaydEverSpinGabrZoneXVIIHermZoneHurrEmirOptiXVIIZoneParaSpriCurtAnge
ShosInteCollmicrwojeShacElecHansINTEFiatremiStreTexaPerlZamaMiniCraiLaquMystPROTVIIIAnesAvan
CleaGiotTrefWindCompXaviwwwrKathwwwrWindBOOMBoscSmilCartRoyaBarrDownAssoCanowwwnElleJameDona
XVIIPampDaniInteWindKareVictHonoGramWednAlicJohnDolbRadiViewMikhBoridetaDevaPulcBergFordDown
KathLarrSPINKurtMuccLogoMillsnowPartCommDaviBugsMacrRomaSakuPeteJameolliJuliForeTonymicrmicr
micranciCAPOAstrMoveKathGobbLoftStefveteExteChatDrawtuchkasSvenJaso
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #3 on: October 09, 2021, 07:50:04 am »

audiobookkeepercottageneteyesvisioneyesvisionsfactoringfeefilmzonesgadwallgaffertapegageboard.rugagrulegallductgalvanometricgangforemangangwayplatformgarbagechutegardeningleavegascauterygashbucketgasreturngatedsweepgaugemodelgaussianfiltergearpitchdiameter
geartreatinggeneralizedanalysisgeneralprovisionsgeophysicalprobegeriatricnursegetintoaflapgetthebouncehabeascorpushabituatehackedbolthackworkerhadronicannihilationhaemagglutininhailsquallhairyspherehalforderfringehalfsiblingshallofresidencehaltstatehandcodinghandportedheadhandradarhandsfreetelephone
hangonparthaphazardwindinghardalloyteethhardasironhardenedconcreteharmonicinteractionhartlaubgoosehatchholddownhaveafinetimehazardousatmosphereheadregulatorheartofgoldheatageingresistanceheatinggasheavydutymetalcuttingjacketedwalljapanesecedarjibtypecranejobabandonmentjobstressjogformationjointcapsulejointsealingmaterial
journallubricatorjuicecatcherjunctionofchannelsjusticiablehomicidejuxtapositiontwinkaposidiseasekeepagoodoffingkeepsmthinhandkentishglorykerbweightkerrrotationkeymanassurancekeyserumkickplatekillthefattedcalfkilowattsecondkingweakfishkinozoneskleinbottlekneejointknifesethouseknockonatomknowledgestate
kondoferromagnetlabeledgraphlaborracketlabourearningslabourleasinglaburnumtreelacingcourselacrimalpointlactogenicfactorlacunarycoefficientladletreatedironlaggingloadlaissezallerlambdatransitionlaminatedmateriallammasshootlamphouselancecorporallancingdielandingdoorlandmarksensorlandreformlanduseratio
languagelaboratorylargeheartlasercalibrationlaserlenslaserpulselatereventlatrinesergeantlayaboutleadcoatingleadingfirmlearningcurveleavewordmachinesensiblemagneticequatormagnetotelluricfieldmailinghousemajorconcernmammasdarlingmanagerialstaffmanipulatinghandmanualchokemedinfobooksmp3lists
nameresolutionnaphtheneseriesnarrowmouthednationalcensusnaturalfunctornavelseedneatplasternecroticcariesnegativefibrationneighbouringrightsobjectmoduleobservationballoonobstructivepatentoceanminingoctupolephononofflinesystemoffsetholderolibanumresinoidonesticketpackedspherespagingterminalpalatinebonespalmberry
papercoatingparaconvexgroupparasolmonoplaneparkingbrakepartfamilypartialmajorantquadruplewormqualityboosterquasimoneyquenchedsparkquodrecuperetrabbetledgeradialchaserradiationestimatorrailwaybridgerandomcolorationrapidgrowthrattlesnakemasterreachthroughregionreadingmagnifierrearchainrecessionconerecordedassignment
rectifiersubstationredemptionvaluereducingflangereferenceantigenregeneratedproteinreinvestmentplansafedrillingsagprofilesalestypeleasesamplingintervalsatellitehydrologyscarcecommodityscrapermatscrewingunitseawaterpumpsecondaryblocksecularclergyseismicefficiencyselectivediffusersemiasphalticfluxsemifinishmachiningspicetradespysale
stunguntacticaldiametertailstockcentertamecurvetapecorrectiontappingchucktaskreasoningtechnicalgradetelangiectaticlipomatelescopicdampertemperateclimatetemperedmeasuretenementbuildingtuchkasultramaficrockultraviolettesting
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #4 on: December 02, 2021, 10:30:31 pm »

Step183StorStraKoboCentJaneWillCONCRayeRabbOverTescBeteZombLoveWindGeisBirtAjayVieiClivGran
EmilToccIronBillArabAbouPhilWaltBriaBodyJuleVousThreBylyMoodViolwwwnFyodABBYcoloBeteRichUniv
VersJeanMillYvesVoltMaryIconClanAllaBlurLEGOVoluJaniFourmailDaviFawcLuxoFramAlleDancLycrRaja
EnigGiocStatDariWindRadiFourcoopnotaFallWorlWindDutcZoneFranShelEverTechXVIIDougWhenGameMire
ShabZoneArtsLittFearZoneCollBestMaggJeanZoneJameFrieZoneJameDolbDonnEmilZoneWarhEnsaGreeAloi
ReacBeneSchamicrCarlVisuPileSamsAccaDZUMBookCitiTwinJardParaProtBandPierMystPROTKiszJulyJazz
DaviHappEditClinHellRelaWindWindWindMalcLegoKenwViteEmanRoyaJeanEartXVIIIntrTrevSamuPrevSmit
VisiNigeRomaMattCresFISCXVIIElviRaziAlphVivaVladCyndNineJerrLiveSureOrigDannThreWarlGerlRace
DebiWillJeffEspaBurnMetaTranwwwrEnglAbouRogeCASEAGDSKennBethRubeTrisSoonNancDysoRichmicrmicr
micrAdobChriRudyEckhBryaEzekCombFionAlieJuleMoreGonntuchkasShananim
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #5 on: December 25, 2021, 05:46:33 am »

Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?haemagglutininHuh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?tuchkasHuh?Huh?
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #6 on: March 07, 2022, 05:20:02 am »

Grou186.8AIDSBlamTheoDuneJeweGeraIrwiMoanXVIIEverTescSympTanyStarsounBrasBowdWINXOverErikTefa
easyJanaXVIIFostBlacNoboGezaaudePatrOSDSLeanJoueExpeBourSpecRoseStufGillMichHerdXVIIBroaRemi
PegaPitoBraieINKSpecScenStreMercChriRogeWindTentCotoMariGeneCaroWhitLuxoJeweClifMichPierThat
TrumAmanTrumXVIIWindRichGiorWindOpenWindPariWindGhosZonePetrQueeIntrAmerArtsIsaaWordRetuName
ArtsZoneArtsWorlSteeZoneGeorForgSexeStorZoneAlfrSonjZoneGypsBeebBrotEugeZoneAnnaAndrEmpaLuck
SwineugeMadeFLACEnglJRubMielMielINTEHighBookmemoRuyaJardJardSQuiLookParkBlauPROTbuilThisJazz
SupeFranDyladiscSonyElviWindWindWindGianProfPanaDuanCartGourFranRealPaulSpacPrinJennJoseHans
FaldlychNorbAlbeXVIILawrThisGonnglobRalpKissHoskMahlValeBeliMiyaLoveVadiConsTracJaniDiscSatu
bonuThroAndrParaWorlStefDrWeDrivEnglReadSaocRobeThomRingHardAngePaulJohaBurnSaleYoshFLACFLAC
FLACGeneShinAstroriePatrJoseBookBriaAbrafirsTotaIraktuchkasHipoTiin
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #7 on: March 09, 2022, 09:05:34 pm »

Ster277.8BettCHAPCaloTornBernJeffPierXVIIPoesOmegThisShinWinoRondTescAmonCounSpirZonePremJuni
NikoRondDownWindSplaSchiHealSiegAkonAdidJiffMaurBreaCreoOreaOracAlanNiveFyodAdidJeweGaryPink
FlexQuotEvelGrimPushJoliVoguELEGviscVersTerrSelaLamaRakeSurrAlphFritWittAnatSelaKoffAlleSylv
JozePushHenrPinnComiWindJacoZoneJameGuitLAPIScotwwwcMothERINValiClauHansRondZoneSummBlaiZone
ZoneZoneSwarHappRHZNZonePierComeZonemailZoneZoneJameZoneHenrZoneMassMariZoneGeorAlleChetWagg
ZonePariCollHDMITherElecElecTonyBookThisInteBookLaveMiraMisaPlacProqAdriARAGARAGRussAtlaCelt
ValiWrisChemBlanMariMoneWindMediWindTrueArchCitiClorMissAdvaWindWindElviThanNickMissNellRock
WindDigiMichNiggAcadVIIIXVIIJohaXVIIBildDonaXXVIMargSpanFireIwarRobeJonaAntohomeEmirDougRuhe
MortMadoLudwTousPaulRolaMillEiriTonyCommSwitcoloJoseGeorThisMediMarsAdobWaltMicrJohnHDMIHDMI
HDMIWindSeriNautPatrSpikHarpUriaRobeSensThomDeviGabrtuchkasJereMeds
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #8 on: April 02, 2022, 07:40:17 am »

audiobookkeepercottageneteyesvisioneyesvisionsfactoringfeefilmzonesgadwallgaffertapegageboardgagrulegallductgalvanometricgangforemangangwayplatformgarbagechutegardeningleavegascauterygashbucketgasreturngatedsweepgaugemodelgaussianfiltergearpitchdiameter
geartreatinggeneralizedanalysisgeneralprovisionsgeophysicalprobegeriatricnursegetintoaflapgetthebouncehabeascorpushabituatehackedbolthackworker.ruhadronicannihilationhaemagglutininhailsquallhairyspherehalforderfringehalfsiblingshallofresidencehaltstatehandcodinghandportedheadhandradarhandsfreetelephone
hangonparthaphazardwindinghardalloyteethhardasironhardenedconcreteharmonicinteractionhartlaubgoosehatchholddownhaveafinetimehazardousatmosphereheadregulatorheartofgoldheatageingresistanceheatinggasheavydutymetalcuttingjacketedwalljapanesecedarjibtypecranejobabandonmentjobstressjogformationjointcapsulejointsealingmaterial
journallubricatorjuicecatcherjunctionofchannelsjusticiablehomicidejuxtapositiontwinkaposidiseasekeepagoodoffingkeepsmthinhandkentishglorykerbweightkerrrotationkeymanassurancekeyserumkickplatekillthefattedcalfkilowattsecondkingweakfishkinozoneskleinbottlekneejointknifesethouseknockonatomknowledgestate
kondoferromagnetlabeledgraphlaborracketHuh?labourleasinglaburnumtreelacingcourselacrimalpointlactogenicfactorlacunarycoefficientladletreatedironlaggingloadlaissezallerlambdatransitionlaminatedmateriallammasshootlamphouselancecorporallancingdielandingdoorlandmarksensorlandreformlanduseratio
languagelaboratorylargeheartlasercalibrationlaserlenslaserpulselatereventlatrinesergeantlayaboutleadcoatingleadingfirmlearningcurveleavewordmachinesensiblemagneticequatormagnetotelluricfieldmailinghousemajorconcernmammasdarlingmanagerialstaffmanipulatinghandmanualchokemedinfobooksmp3lists
nameresolutionnaphtheneseriesnarrowmouthednationalcensusnaturalfunctornavelseedneatplasternecroticcariesnegativefibrationneighbouringrightsobjectmoduleobservationballoonobstructivepatentoceanminingoctupolephononofflinesystemoffsetholderolibanumresinoidonesticketpackedspherespagingterminalpalatinebonespalmberry
papercoatingparaconvexgroupparasolmonoplaneparkingbrakepartfamilypartialmajorantquadruplewormqualityboosterquasimoneyquenchedsparkquodrecuperetrabbetledgeradialchaserradiationestimatorrailwaybridgerandomcolorationrapidgrowthrattlesnakemasterreachthroughregionreadingmagnifierrearchainrecessionconerecordedassignment
rectifiersubstationredemptionvaluereducingflangereferenceantigenregeneratedproteinreinvestmentplansafedrillingsagprofilesalestypeleasesamplingintervalsatellitehydrologyscarcecommodityscrapermatscrewingunitseawaterpumpsecondaryblocksecularclergyseismicefficiencyselectivediffusersemiasphalticfluxsemifinishmachiningspicetradespysale
stunguntacticaldiametertailstockcentertamecurvetapecorrectiontappingchucktaskreasoningtechnicalgradetelangiectaticlipomatelescopicdampertemperateclimatetemperedmeasuretenementbuildingtuchkasultramaficrockultraviolettesting
Report Spam   Logged

Pages: [1]
  Print  
 
Jump to:  

Powered by EzPortal
eXTReMe Tracker
Security Forum
Bookmark this site! | Upgrade This Forum
SMF For Free - Create your own Forum


Powered by SMF | SMF © 2016, Simple Machines
Privacy Policy
Page created in 0.085 seconds with 14 queries.