Quantcast
Channel: BulletProof Security Forum » All Posts
Viewing all articles
Browse latest Browse all 12472

Reply To: HEAD request not disabled

$
0
0

I forgot to mention that – I already checked that, but just double-checked again – so straight from the root .htaccess through FTP:

# REQUEST METHODS FILTERED
# This filter is for blocking junk bots and spam bots from making a HEAD request, but may also block some
# HEAD request from bots that you want to allow in certains cases. This is not a security filter and is just
# a nuisance filter. This filter will not block any important bots like the google bot. If you want to allow
# all bots to make a HEAD request then remove HEAD from the Request Method filter.
# The TRACE, DELETE, TRACK and DEBUG request methods should never be allowed against your website.
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]
RewriteRule ^(.*)$ - [F,L]

It is a relief that the other filtering is active!

  • This reply was modified 8 hours, 54 minutes ago by Avatar of AITpro Admin AITpro Admin.

Viewing all articles
Browse latest Browse all 12472

Trending Articles