Talk:Htaccess examples (security)
From Joomla! Documentation
Revision as of 15:08, 9 December 2014 by Pentacle (talk | contribs) (→Edit Requests 9 Dec 2014 15:03: new section)
It could be useful to add some explanations of what these settings do. Jossi 16:53, 6 March 2009 (UTC)
move olddomain redirect?
Why not move the olddomain redirect section to its own code block, or in the other useful settings code block.
Edit Requests 9 Dec 2014 15:03
Hi,
This .htaccess file only allows tmpl=system and tmpl=component. It is possible for developers and templates to provide more options as we do in Nooku Framework.
This rule also does not stop people from fingerprinting Joomla sites either as any URL can still be accessed with tmpl=component.
So I would like to request the removal of the |mpl part in the following line:
RewriteCond %{QUERY_STRING} (^|&)t(p|emplate|mpl)= [NC]
More info and explanation can be found in the below links:
https://github.com/nikosdion/master-htaccess/issues/1 https://github.com/nikosdion/master-htaccess/pulls/2