Quantcast
Channel: BulletProof Security Forum » All Posts
Viewing all articles
Browse latest Browse all 12471

Reply To: problem with special characters in generated htaccess

$
0
0

In the BPS QUERY STRING section is this string correct or has it been affected by a similar issue
 

RewriteCond %{QUERY_STRING} (\.\./|%2e%2e%2f|%2e%2e/|\.\.%2f|%2e\.%2f|%2e\./|\.%2e%2f|\.%2e/) [NC,OR]

I noticed that 0.49 I had the following instead

RewriteCond %{QUERY_STRING} (\.\./|\.\.) [OR]

 
Or perhaps it’s just escaping, should it be this…

RewriteCond %{QUERY_STRING} (\.\./|\.\.\\|\.\./|\.\.\\|\.\.\\|\.\./|\.\.\\|\.\./) [NC,OR]


Viewing all articles
Browse latest Browse all 12471

Trending Articles