diff --git a/upload/.htaccess b/upload/.htaccess index 8428f58b..e9fac0d6 100644 --- a/upload/.htaccess +++ b/upload/.htaccess @@ -1,50 +1,4 @@ -# -# secfilterengine off -# secfilterscanPOST off -# -#Options +Indexes - -#php_flag safe_mode off -#php_value max_execution_time 1000 -#php_value session.gc_maxlifetime 14000 -#php_value output_buffering on -#php_value upload_max_filesize 2147483648 -#php_value post_max_size 2147483648 -#php_flag display_errors off - -Options All -Indexes -FileETag MTime Size -Options +FollowSymlinks RewriteEngine on - - -order allow,deny -satisfy all - - -########## Begin - Rewrite rules to block out some common exploits -# -# Block out any script trying to set a mosConfig value through the URL -RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR] -# Block out any script trying to base64_encode crap to send via URL -RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR] -# Block out any script that includes a