Quantcast
Channel: BulletProof Security Forum » All Posts
Viewing all articles
Browse latest Browse all 12461

Reply To: HEAD request not disabled

$
0
0

I don’t get it either. I just upgraded to the Pro version and did a clean install, so all htaccess files are the BPS standards. The # Request methods filtered are present in both files, and have not been removed in the custom code (again, this was a clean install so no changes were made at all):


# CUSTOM CODE REQUEST METHODS FILTERED - Your Custom htaccess code will be created here with AutoMagic
# REQUEST METHODS FILTERED
# This filter is for blocking junk bots and spam bots from making a HEAD request, but may also block some
# HEAD request from bots that you want to allow in certains cases. This is not a security filter and is just
.....
.....
.....
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]
RewriteRule ^(.*)$ - [F,L]

I cannot lock the files, since my hosting provider uses DSO:

Server API: apache2handler – Your Host Server is using DSO

The URL is http://www.versteegmgt.com


Viewing all articles
Browse latest Browse all 12461

Trending Articles