Is it possible to make the URL index.php?view=something
back into /something
?
1 Answer
RewriteCond %{QUERY_STRING} [&?]view=([^&]*)
RewriteRule index.php$ /%1
Note that, if you're not careful, a crafty attacker might be able to abuse this; for example, by generating arbitrary URIs by passing parameters to "view". Appropriate precautions should be taken.
Also, you might want to append an [L], [R], or [R=301] to the RewriteRule (or a combination thereof), depending on your exact intent.
-
As long as the URL is rewritten to the same server, how can this technique be abused? (curious because this is how I do it on my website).– matpieDec 27, 2010 at 2:23
-
1One example off the top of my head: let's say you wanted to let rewritten index.php's be deeper than "/", so you had a rule like
RewriteRule index.php$ %1 [L,R]
. Imagine if I gave you the URIhttp://www.yoursite.com/dir/index.php?view=http%3A%2F%2Fwww.evilattackersite.com
—what happens?– BMDanDec 27, 2010 at 2:53 -