User contributions for Nikosdion code

16 May 2011

• 00:3700:37, 16 May 2011 diff hist −4 Htaccess examples (security) [db3f6e8426] 2011-04-24 08:53 (3.3.c) Referer filtering would block incoming requests from Google AdWords, PayPal etc when they were requesting dynamic pages (generated on the fly) with html suffix.
• 00:2900:29, 16 May 2011 diff hist +102 Htaccess examples (security) [7f16b19281] 2011-04-17 21:08 (3.3.b) Tested and working. Reverted some patterns back to .* rather than fix them. Re-added one "-f" check. (Noted later: introduced a typo, "$1" instead of "-".)
• 00:2000:20, 16 May 2011 diff hist +100 Htaccess examples (security) [ac17649143] 2011-04-17 15:04 (3.3.a) Rolling back all of the optimizations because they cause a lot of problems. For example, images like "this.is.a.valid.image.png" are not taken into account.

15 May 2011

• 22:4622:46, 15 May 2011 diff hist −1 Htaccess examples (security) [7946abcbe0] 2011-04-16 21:33 (3.2.f) Typo in the ico rule. Remove errant question mark. (Compare with version 2.4.6 to see the suggestions that have not been implemented.)
• 22:3722:37, 15 May 2011 diff hist −5 Htaccess examples (security) [eb67bf292b] 2011-04-16 06:43 (3.2.e) Typos. Remove errant space. Change domain.com to example.com. Add vcf to URL extensions that can be rewritten.
• 22:3222:32, 15 May 2011 diff hist −12 Htaccess examples (security) [e439c8e078] 2011-04-15 14:05 (3.2.d) Typos. Remove "html?" from two RegEx patterns. Fix [F] to [L]. Fix [L] to [F]. The latter two were typos introduced in earlier revisions.
• 22:2622:26, 15 May 2011 diff hist +20 Htaccess examples (security) [7dd7b56542] 2011-04-11 21:50 (3.2.c) Bug in file injection prevention code. Disable access to php.ini. Update of forwarding to index.php rule to match Joomla! 1.6. Small changes in comments section
• 22:2322:23, 15 May 2011 diff hist −10 Htaccess examples (security) [01a97dff0a] 2011-04-11 20:36 (3.2.b) Bug fixes in RegEx's. Change Redirect to RewriteRule. Fixed various RegEx patterns. (Noted later: several errors missed or introduced here.)
• 22:1622:16, 15 May 2011 diff hist +148 Htaccess examples (security) [4e9b8df0c7] 2011-04-09 07:06 (3.2.a) Slight changes with negligible performance impact. Backreferences don't need to be created on some patterns. End anchoring needed on one other pattern.
• 17:5517:55, 15 May 2011 diff hist −316 Htaccess examples (security) [00498b45e5] 2011-04-05 18:12 (3.1.l) Removed some unnecessary -f checks. (Note: when site broke, added them back in later.) Removed the old-domain index canonicalisation rule.
• 17:5117:51, 15 May 2011 diff hist +26 Htaccess examples (security) [ecacd286c8] 2011-04-04 16:50 (3.1.k) Added changelog for version 3.1.
• 17:4417:44, 15 May 2011 diff hist +513 Htaccess examples (security) [bab4007c50] 2011-04-04 13:56 (3.1.j) Added comments to Joomla! core SEF section. The words are much the same as found in Joomla 1.5.23 and 1.6.2 and are as suggested by g1smd.
• 17:4017:40, 15 May 2011 diff hist +893 Htaccess examples (security) [81893d126f] 2011-04-04 13:51 (3.1.i) Back-end and front-end protection optimization. Fixed the UNION SELECT SQLi rule to actually work against real attacks. Optimised several more RegEx patterns.
• 17:3517:35, 15 May 2011 diff hist +111 Htaccess examples (security) [fc1892bc92] 2011-04-04 13:14 (3.1.h) Bug in query string protection rule. Fixed several typos.
• 17:3217:32, 15 May 2011 diff hist +164 Htaccess examples (security) [13ddfe907d] 2011-04-04 12:55 (3.1.g) Common exploits protection: Minor changes in comments, combined base64_encode/base64_decode rule. Based on suggestions by g1smd.
• 17:2917:29, 15 May 2011 diff hist +187 Htaccess examples (security) [a1cacc8194] 2011-04-04 10:52 (3.1.f) Alternative for HTTP to HTTPS redirection. Check SERVER_PORT instead of HTTPS. Change [L,R] to [R=301,L]. Suggestions from g1smd. Added notes.
• 17:2517:25, 15 May 2011 diff hist +175 Htaccess examples (security) [2b28233a9b] 2011-04-04 10:49 (3.1.e) Typos in www to non-www, non-www to www and old domain to new domain redirection code. Changed [R,L] and [L=301,R] to [R=301,L]. Added notes.
• 17:2017:20, 15 May 2011 diff hist +4 Htaccess examples (security) [7ad86544c8] 2011-04-04 10:44 (3.1.d) GET variables not passed along in the index.php to site root redirection. Altered redirect to work only for root index.php requests.
• 17:1617:16, 15 May 2011 diff hist +36 Htaccess examples (security) [8e877e9a01] 2011-04-04 10:41 (3.1.c) Expiration time of static resources adjusted to 1 month instead of 1 year. Suggestion from g1smd http://www.webmasterworld.com/apache/4118917.htm#msg4119380
• 17:0517:05, 15 May 2011 diff hist −206 Htaccess examples (security) [3db9a25706] 2011-04-04 10:39 (3.1.b) Typo fixed. Spelling.
• 17:0217:02, 15 May 2011 diff hist +283 Htaccess examples (security) [aff5fda718] 2011-04-04 10:37 (3.1.a) Importing version 3.0. Now using GitHub code repository. Changed domain.com to example.com. Reverted to using greedy and ambiguous .* RegEx patterns.
• 16:5616:56, 15 May 2011 diff hist −1,765 Htaccess examples (security) [from-snipt] 2011-03-28 03:03 (3.0.a) A random copy tagged as Version 3.0 as originally hosted at snipt.net. Incorporates some of the recent optimisation suggestions from g1smd.