CMS Made Simple Forums

Code: Select all

ServerSignature Off
Options -Indexes

<Files "config.php">
order allow,deny
deny from all
</Files>

ErrorDocument 403 /forbidden403.html

RewriteEngine On
#RewriteBase /

#IF the QS contains a "http"
RewriteCond %{QUERY_STRING} http [OR]
#OR if the QS contains a star
RewriteCond %{QUERY_STRING} \*
#THEN deny the request
RewriteRule ^.*$ - [F,L] 

Code: Select all

Options All -Indexes


order allow,deny
deny from all


ServerSignature Off

RewriteEngine On
RewriteBase /

# URL Filtering helps stop some hack attempts
#IF the QS contains a "http"
RewriteCond %{QUERY_STRING} http [OR]
#OR if the QS contains a star
RewriteCond %{QUERY_STRING} \* [OR]
#IF the URI contains a "http:"
RewriteCond %{QUERY_STRING} http\: [OR]
#OR if the URI contains a "["
RewriteCond %{QUERY_STRING} \[ [OR]
#OR if the URI contains a "]"
RewriteCond %{QUERY_STRING} \] [OR]
#OR if the URI contains a ""
RewriteCond %{QUERY_STRING} (\|%3E) [NC,OR]
#OR script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
#OR any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^.*$ - [F,L]
# END Filtering

# 301 Redirect all requests that don't contain a dot or trailing slash to
# include a trailing slash
RewriteCond %{REQUEST_URI} !/$
RewriteCond %{REQUEST_URI} !\.
RewriteRule ^(.*) %{REQUEST_URI}/ [R=301,L]

# Rewrites urls in the form of /parent/child/
# but only rewrites if the requested URL is not a file or directory
RewriteCond %{REQUEST_FILENAME} !-f [NC]
RewriteCond %{REQUEST_FILENAME} !-d [NC]
RewriteRule ^(.+)$ index.php?page=$1 [QSA]