Sembra che riesco a bloccare delle SQL injection (per il momento :-() con htaccess con il seguente codice, ma vorrei xò escludere una cartella (Phpmyadmin) .....
Come potrei escludere dalla direttiva la cartella /phpmyamdin.domain.ext/ ??
Grazie per un suggerimento
codice:<Directory "/var/www/vhosts/*/httpdocs/"> RewriteEngine On RewriteBase / RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK) [NC,OR] RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>|'|"|;|\?|\*|!|\:|\+).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(%22|%27|%3C|%3E|%5C|%7B|%7C|%00).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(%0|%A|%B|%C|%D|%E|%F|127\.0).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(\@|\[|\]|\^|\`|\{|\}|\~).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(passwd|environ).* [NC,OR] RewriteCond %{QUERY_STRING} \.(sql|ini|cfg|conf|sh|log|tar|zip|rar)$ [NC,OR] RewriteCond %{QUERY_STRING} \| [NC,OR] RewriteCond %{QUERY_STRING} \.\.%2F [NC,OR] RewriteCond %{QUERY_STRING} \.\./ [NC,OR] RewriteCond %{QUERY_STRING} [^?]*\? [NC,OR] RewriteCond %{REQUEST_URI} ^.*(\[|\]|\(|\)|<|>|'|"|;|\?|\*|!|\:|\+).* [NC,OR] RewriteCond %{REQUEST_URI} ^.*(%22|%27|%3C|%3E|%5C|%7B|%7C|%00).* [NC,OR] RewriteCond %{REQUEST_URI} ^.*(%0|%A|%B|%C|%D|%E|%F|127\.0).* [NC,OR] RewriteCond %{REQUEST_URI} ^.*(\=|\@|\[|\]|\^|\`|\{|\}|\~).* [NC,OR] RewriteCond %{REQUEST_URI} ^.*(passwd|environ).* [NC,OR] RewriteCond %{REQUEST_URI} \.(sql|ini|cfg|conf|sh|log|tar|zip|rar)$ [NC,OR] RewriteCond %{REQUEST_URI} \| [NC,OR] RewriteCond %{REQUEST_URI} \.\.%2F [NC,OR] RewriteCond %{REQUEST_URI} \.\./ [NC,OR] RewriteCond %{HTTP_COOKIE} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|%00|\*).* [NC,OR] RewriteCond %{HTTP_REFERER} ^(.*)(<|>|'|%0A|%0D|%27|%3C|%3E|%00|\*).* [NC,OR] RewriteCond %{HTTP_USER_AGENT} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|%00|\*).* [NC] #RewriteCond %{REQUEST_URI} !^/sql.php/ [NC] RewriteRule .* - [F] </Directory>
Rispondi quotando
