root/coldbox/trunk/install/SESRewriteRules/.htaccess @ 1662

Revision 1662, 1.1 kB (checked in by sullah, 5 years ago)

Ticket #512

  • Property svn:mime-type set to text/plain
  • Property svn:executable set to *
Line 
1RewriteEngine on
2
3#SQL Injection Protection --Read More www.cybercrime.gov
4#Please use these rules if below words does not conflict with your friendly-urls. You may modify accordingly
5RewriteRule ^.*EXEC\(@.*$                               /notfound.htm [L,F,NC]
6RewriteRule ^.*CAST\(.*$                                /notfound.htm [L,F,NC]
7RewriteRule ^.*DECLARE.*$                               /notfound.htm [L,F,NC] 
8RewriteRule ^.*DECLARE%20.*$                    /notfound.htm [L,F,NC]
9RewriteRule ^.*NVARCHAR.*$                              /notfound.htm [L,F,NC] 
10RewriteRule ^.*sp_password.*$                   /notfound.htm [L,F,NC]
11RewriteRule ^.*%20xp_.*$                                /notfound.htm [L,F,NC]
12
13#Ignore images and this would be last rule --if the condition matched
14RewriteRule ^/(.*\.(png|gif|jpg|bmp)) /$1 [L,PT,NC]
15
16#Ignore CSS or JS files  and this would be last rule --if the condition matched
17RewriteRule ^/(.*\.(css|js)) /$1 [L,PT,NC]
18
19#Ignore txt/doc/pdf/xls files  and this would be last rule --if the condition matched
20RewriteRule ^/(.*\.(txt|pdf|doc|xls)) /$1 [L,PT,NC]
21
22RewriteRule ^$ index.cfm [QSA]
23RewriteCond %{REQUEST_FILENAME} !-f
24RewriteCond %{REQUEST_FILENAME} !-d
25RewriteRule ^(.*)$ index.cfm/%{REQUEST_URI} [QSA,L]
Note: See TracBrowser for help on using the browser.