Anti-Attack [Idea-Question] ?
#1

Does this work? Many have no idea.

Edit your root .htacesss and introduce your server ; This function blocking by base64_encode requests and blocking all attacks. (Only for SQL Servers)

Code :
__________________________________________________ ____________

RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [OR]
RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|[|%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|[|%[0-9A-Z]{0,2})
RewriteCond %{QUERY_STRING} sbp(=|%20|%3D) [OR]
RewriteCond %{QUERY_STRING} sb_authorname(=|%20|%3D)
RewriteRule ^(.*)$ index.php [F,L]

__________________________________________________ _____________
Reply
#2

This might work for a while but now you have shown hackers the code they will find ways to get around it.
Reply


Forum Jump:


Users browsing this thread: 2 Guest(s)