Re: hmmm
This WebDNA talk-list message is from 2006
It keeps the original formatting.
numero = 67339
interpreted = N
texte = Jesse- How does one implement the below listed rules? Will On May 30, 2006, at 4:42 PMCDT, Jesse Proudman wrote: > Here's what I'm using: > > RewriteEngine On > RewriteCond %{QUERY_STRING} ^.*text=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*include=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*setheader=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*math=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*!=.*$ [NC] > RewriteRule ^.*$ - [F] > > > On May 30, 2006, at 1:10 PM, devaulw@onebox.com wrote: > >> Yikes. Any chance you can post the rewriterule for us? >> >> Thanks, >> Bill >> >> >> -----Original Message----- >> From: Jesse Proudman
>> Sent: Tue, 30 May 2006 12:18:11 -0700 >> To: "WebDNA Talk" >> Subject: Re: hmmm >> >> [This was reported to SM a week or two ago] >> >> On a security note... >> >> http://www.smithmicro.com/?text=&!=&math >> I solved this on my servers using Mod Rewrite, but every one may want >> to do something to block it on their boxes. Make sure you don't >> store sensitive information (Authorize.net username / passwords, etc) >> in text vars until you've got it patched. >> >> >> On May 30, 2006, at 11:38 AM, WJ Starck wrote: >> >>> Indeed. >>> >>> What else can ya say, in a day and age where security and >>> extensibility are at the forefront of many an admin's mind? >>> >>> R.I.P. beloved WebDNA... >> >> -- >> >> Jesse Proudman >> Blue Box Group, LLC >> >> p. +1.800.613.4305 x801 >> e. jesse@blueboxgrp.com >> >> >> >> ------------------------------------------------------------- >> This message is sent to you because you are subscribed to >> the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to > digest@talk.smithmicro.com> >> Web Archive of this list is at: http://webdna.smithmicro.com/ >> >> >> >> ------------------------------------------------------------- >> This message is sent to you because you are subscribed to >> the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to > digest@talk.smithmicro.com> >> Web Archive of this list is at: http://webdna.smithmicro.com/ > > -- > > Jesse Proudman > Blue Box Group, LLC > > p. +1.800.613.4305 x801 > e. jesse@blueboxgrp.com > > > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to digest@talk.smithmicro.com> > Web Archive of this list is at: http://webdna.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Jesse- How does one implement the below listed rules? Will On May 30, 2006, at 4:42 PMCDT, Jesse Proudman wrote: > Here's what I'm using: > > RewriteEngine On > RewriteCond %{QUERY_STRING} ^.*text=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*include=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*setheader=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*math=.*$ [NC,OR] > RewriteCond %{QUERY_STRING} ^.*!=.*$ [NC] > RewriteRule ^.*$ - [F] > > > On May 30, 2006, at 1:10 PM, devaulw@onebox.com wrote: > >> Yikes. Any chance you can post the rewriterule for us? >> >> Thanks, >> Bill >> >> >> -----Original Message----- >> From: Jesse Proudman >> Sent: Tue, 30 May 2006 12:18:11 -0700 >> To: "WebDNA Talk" >> Subject: Re: hmmm >> >> [This was reported to SM a week or two ago] >> >> On a security note... >> >> http://www.smithmicro.com/?text=&!=&math >> I solved this on my servers using Mod Rewrite, but every one may want >> to do something to block it on their boxes. Make sure you don't >> store sensitive information (Authorize.net username / passwords, etc) >> in text vars until you've got it patched. >> >> >> On May 30, 2006, at 11:38 AM, WJ Starck wrote: >> >>> Indeed. >>> >>> What else can ya say, in a day and age where security and >>> extensibility are at the forefront of many an admin's mind? >>> >>> R.I.P. beloved WebDNA... >> >> -- >> >> Jesse Proudman >> Blue Box Group, LLC >> >> p. +1.800.613.4305 x801 >> e. jesse@blueboxgrp.com >> >> >> >> ------------------------------------------------------------- >> This message is sent to you because you are subscribed to >> the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to > digest@talk.smithmicro.com> >> Web Archive of this list is at: http://webdna.smithmicro.com/ >> >> >> >> ------------------------------------------------------------- >> This message is sent to you because you are subscribed to >> the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to > digest@talk.smithmicro.com> >> Web Archive of this list is at: http://webdna.smithmicro.com/ > > -- > > Jesse Proudman > Blue Box Group, LLC > > p. +1.800.613.4305 x801 > e. jesse@blueboxgrp.com > > > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to digest@talk.smithmicro.com> > Web Archive of this list is at: http://webdna.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
WJ Starck
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Multiply prices (1997)
[WebDNA] Store module/site (2012)
New Web Site Developers Database (1996)
[WebDNA] SEARCH question - SHOWIF - HIDEIF question (2011)
Separate SSL Server (1997)
Summary search -- speed (1997)
Replace/Commit not Replacing/Commiting (2000)
How to get shownext to just shownext once (1997)
[WebDNA] was: Two file tags don't work as expected: Now: Permission Settings (2009)
[ShowIf] and empty fields (1997)
Stumpted Again (1997)
cookies ok ??? (2006)
Which GUI HTML editors work with WC ? (1997)
A Toughie (1998)
supressing math results (1997)
WebDNA and CPanel Servers (2004)
WebCatalog Technical Reference (1997)
protect tag on NT IIS (1997)
E-mail Attachments (1997)
pc (1997)