Advertisement
Guest User

Untitled

a guest
Nov 29th, 2015
98
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.18 KB | None | 0 0
  1. ##
  2. # @package Joomla
  3. # @copyright Copyright (C) 2005 - 2015 Open Source Matters. All rights reserved.
  4. # @license GNU General Public License version 2 or later; see LICENSE.txt
  5. ##
  6.  
  7. ##
  8. # READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE!
  9. #
  10. # The line just below this section: 'Options +FollowSymLinks' may cause problems
  11. # with some server configurations. It is required for use of mod_rewrite, but may already
  12. # be set by your server administrator in a way that disallows changing it in
  13. # your .htaccess file. If using it causes your server to error out, comment it out (add # to
  14. # beginning of line), reload your site in your browser and test your sef url's. If they work,
  15. # it has been set by your server administrator and you do not need it set here.
  16. ##
  17.  
  18. ## No directory listings
  19. IndexIgnore *
  20.  
  21. ## Can be commented out if causes errors, see notes above.
  22. #Options +FollowSymlinks
  23. #Options -Indexes
  24.  
  25. ## Mod_rewrite in use.
  26.  
  27. RewriteEngine On
  28.  
  29. ## Begin - Rewrite rules to block out some common exploits.
  30. # If you experience problems on your site block out the operations listed below
  31. # This attempts to block the most common type of exploit `attempts` to Joomla!
  32. #
  33. # Block out any script trying to base64_encode data within the URL.
  34. RewriteCond %{QUERY_STRING} base64_encode[^(]*\([^)]*\) [OR]
  35. # Block out any script that includes a <script> tag in URL.
  36. RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
  37. # Block out any script trying to set a PHP GLOBALS variable via URL.
  38. RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
  39. # Block out any script trying to modify a _REQUEST variable via URL.
  40. RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
  41. # Return 403 Forbidden header and show the content of the root homepage
  42. RewriteRule .* index.php [F]
  43. #
  44. ## End - Rewrite rules to block out some common exploits.
  45.  
  46. ## Begin - Custom redirects
  47. #
  48. # If you need to redirect some pages, or set a canonical non-www to
  49. # www redirect (or vice versa), place that code here. Ensure those
  50. # redirects use the correct RewriteRule syntax and the [R=301,L] flags.
  51. #
  52. ## End - Custom redirects
  53.  
  54. ##
  55. # Uncomment following line if your webserver's URL
  56. # is not directly related to physical file paths.
  57. # Update Your Joomla! Directory (just / for root).
  58. ##
  59.  
  60. #RewriteBase /
  61.  
  62. ## Begin - Joomla! core SEF Section.
  63. #
  64. RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
  65. #
  66. # If the requested path and file is not /index.php and the request
  67. # has not already been internally rewritten to the index.php script
  68. RewriteCond %{REQUEST_URI} !^/index\.php
  69. # and the request is for something within the component folder,
  70. # or for the site root, or for an extensionless URL, or the
  71. # requested URL ends with one of the listed extensions
  72. RewriteCond %{REQUEST_URI} /component/|(/[^.]*|\.(php|html?|feed|pdf|vcf|raw))$ [NC]
  73. # and the requested path and file doesn't directly match a physical file
  74. RewriteCond %{REQUEST_FILENAME} !-f
  75. # and the requested path and file doesn't directly match a physical folder
  76. RewriteCond %{REQUEST_FILENAME} !-d
  77. # internally rewrite the request to the index.php script
  78. RewriteRule .* index.php [L]
  79. #
  80. ## End - Joomla! core SEF Section.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement