phpBB.de

Code: Alles auswählen

<Files config.php> 
Deny from all 
</Files> 

DirectoryIndex index.htm index.php index.html 

# Note: If you receive an Server Error Message "500" contact 
# your local provider to let him set this configs 

# Note: "safe_mode" can only been set in php.ini OR httpd.conf 
# "safe_mode = off" is recommend, but only if your server 
# has set more security configs. Otherwise "on" is recommend 

# allow register globals 
php_flag register_globals off 

# allow backslash escaping for Get / Post / Cookie 
php_flag magic_quotes_gpc on 

# forbid files without extensions 
# it can only been set if AllowOverride is set 
AcceptPathInfo off 

RewriteEngine on 

# security settings 
RewriteCond %{QUERY_STRING} ^(.*)wget\%20 [OR] 
RewriteCond %{QUERY_STRING} ^(.*)fetch\%20 [OR] 
RewriteCond %{QUERY_STRING} ^(.*)echr(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)rush=\%65\%63\%68 [OR] 
RewriteCond %{QUERY_STRING} ^(.*)rush=echo [OR] 
RewriteCond %{QUERY_STRING} ^(.*)esystem(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)passthru(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)\.printf\( [OR] 
RewriteCond %{QUERY_STRING} ^(.*)cmd [OR] 
RewriteCond %{QUERY_STRING} ^(.*)\%27(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)"(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)\%22(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)`(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)\%60(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)\%25(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)=http://(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)=http\%3A\%2F\%2F(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)=ftp://(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)=ftp\%3A\%2F\%2F(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)=https://(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)=https\%3A\%2F\%2F(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)alert\(document(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)union(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)UNION(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)SQL_INJECTION(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)phpbb_root_path=(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)configdir(.*) [NC,OR] 
RewriteCond %{QUERY_STRING} ^(.*)curl(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)lynx(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)w3\%20(.*) [OR] 
RewriteCond %{HTTP_COOKIE}% s:(.*):\%22test1\%22\%3b [OR] 
RewriteCond %{QUERY_STRING} .*'.* [OR] 
RewriteCond %{HTTP_USER_AGENT} ^lwp.* [OR,NC] 
RewriteCond %{HTTP_USER_AGENT} ^Python* [NC] 
RewriteRule ^.*$ http://127.0.0.1/ [R,L]

Code: Alles auswählen

order deny, allow
deny from 217.184.10.2
deny from 222.184.10.2
u.s.w....

Code: Alles auswählen

order deny, allow
deny from 53.
allow from all 

Code: Alles auswählen

AuthType Basic
AuthName "Restricted Directory"
AuthUserFile  /home/www/htdocs/aan-forum.de/
require valid-user