Directory-level configuration file found mostly on Apache web servers
19
votes
3answers
479 views
Suspicious .htaccess File
This was uploaded to one of my FTP folders. I'm not familiar with Apache, but still curious - can someone tell me what type of dastardly act this file is trying to commit? Thanks!
RewriteEngine On
...
10
votes
3answers
14k views
How to enable either Gzip or Deflate compression via .htaccess?
How to enable either Gzip or Deflate compression via .htaccess and which one is best these days?
Code examples needed.
9
votes
10answers
601 views
.htaccess doesn't redirect to www-prefixed page properly
I'm trying to redirect an url without www. to www.version (domain.cz to www.domain.cz).
I use the usual
RewriteCond %{HTTP_HOST} ^domain\.cz [nc]
RewriteRule (.*) http://www.domain.cz/$1 [R=301,L]
...
8
votes
4answers
13k views
How to get apache2 to redirect to a subdirectory
I am running apache2 on debian etch, with multiple virtual hosts.
I want to redirect so that http://git.example.com goes to http://git.example.com/git/
Should be really simple, but google isn't ...
8
votes
1answer
155 views
Create VHost & Forward subdomain to it
Gurus of So
I have a simple .htaccess file where I only redirect non www to www for my webapp. Now what I want to do is
Create a new vhost like http://subdomain.mydomain.tld
Create a redirect for ...
8
votes
3answers
2k views
How do I obscure my Wordpress install via htaccess?
(I am aware that security via obscurity is not recommended).
I am trying to hide the fact that I am using Wordpress. This post is helpful, but it only addresses the content (sort of). I am interested ...
7
votes
3answers
14k views
How to redirect root and only root via htaccess?
I want to redirect only my root to another url, but maintain all the /sub/directories where they belong (and redirect)
example:
mysite.com/1 redirects to somewhere
mysite.com/admin opens a page
i ...
7
votes
2answers
445 views
Dissecting a website attack through a compromised FTP account
My site has been hacked and at this point, I know some details, but I'm at a loss at exactly how it happened or how to prevent it in the future. I need your help in trying to dissect the attack so ...
7
votes
2answers
12k views
Configuring favicon with expires header in htaccess
I have implemented Expires headers via mod_expires on my Apache server and have successfully created expires headers for most file types, however I am having trouble with the favicon.
I initially ...
7
votes
5answers
931 views
How to prevent hot linking (“image theft” / “bandwidth theft”) of ressources on my site?
I'm trying to write the "ultimate" anti hot linking .htaccess...
You can find many examples/tutorials/generators on the net but many of them are wrong or incomplete (or even both).
These are the ...
7
votes
2answers
1k views
Bypassing htaccess restrictions?
I found this in my apache access logs
access.log:555.555.555.555 - - [05/May/2011:12:12:21 -0400] "GET /somedir/ HTTP/1.1" 403 291 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:5.0) Gecko/20100101 ...
6
votes
9answers
654 views
Successfully, permanently ban a user from a website? [closed]
I have a social networking website and I want to ban a user from the website. I've added his IP address to the ban list in the .htacess file and to the php level for banning that user, but he keeps ...
6
votes
3answers
9k views
Creating a cookie-free domain to serve static content
I am trying to create a "example.com" domain to serve static content to my original domain. How would I make the "example.com" domain to so its cookie-free when loading content? I am thinking that ...
6
votes
3answers
3k views
Limit upload file size and redirect user to error page if limit exceeds
Is it possible to redirect user to file file too big page
when POST request size exceeds specified limit?
I am aware about max-request-size option, but it gives just static page that cannot be ...
6
votes
4answers
11k views
How to solve “ExpiresActive not allowed here” error message in .htaccess file?
I am trying to add Expires headers to the HTTP responses of the site I am working on. The only way for me to control the Apache 1.3 server is by editing my .htaccess file. I tried adding code such as ...
6
votes
1answer
716 views
SSL redirect on EC2 instance behind SSL terminating load balancer
I'm trying to redirect all url's to https in a web application.
I have an ec2 instance behind an elastic load balancer. SSL is terminated on the load balancer.
Any attempts at redirection end up ...
6
votes
4answers
397 views
Relative substitution in mod_rewrite RewriteRule
I want to create a mod_rewrite RewriteRule which is independent from the location where the web page is installed. I want to define the rewrite rule in a .htaccess file. Let's take this as an example:
...
6
votes
2answers
1k views
Vanity URL manager for Apache Web Server
I'm looking for a tool that manages vanity url's for a single domain running on Apache (or IHS - IBM HTTP Server).
What i mean by vanity URL:
www.mycompany.com/ProjectA would
redirect to
...
5
votes
3answers
2k views
Returning 404 code for unauthorized attempts
I have an admin directory on my web server (http://test.com/admin) and I don't want unauthorized parties to access this /admin/ directory instead I want to return 404 error code for all unauthorized ...
5
votes
2answers
3k views
Do I need to restart Apache if I modified an htaccess file?
So I changed an htaccess file on my server, and am not seeing the changes. Do I need to restart Apache if I modified an htaccess file?
Update:
So I don't think this is my problem. Please see my ...
5
votes
1answer
7k views
Why does my RewriteLog not work?
I have an .htaccess which looks like this:
RewriteEngine on
RewriteLog "/Applications/MAMP/logs/rewrite_engine_log"
RewriteCond %{REQUEST_URI} !/(index.php|css|images|js)/.*$
RewriteRule (.*) ...
5
votes
3answers
209 views
Is my webserver allowing pre-fetching?
I have an image based website that hosts multiple galleries. When a user clicks one of the images the views property for the particular image is incremented. However, I noticed when using Firefox ...
5
votes
3answers
313 views
Redirection by IP causing infinite loop
I am working to transfer a server from one box to another and do a massive code update tonight. To do this I'd like to set up a redirection so that normal site visitors go to a holding page. But ...
5
votes
1answer
2k views
max length of url 257 characters for mod_rewrite?
My url scheme is /foo/var1-var2-var3.../bar
I am using these mod_rewrite rules:
RewriteBase /foo/
RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
...
5
votes
1answer
785 views
.htaccess rewrite http to https results in loop
On an apache 2.2 server running varnish, I am trying to redirect
http -> to https for an entire Drupal
Commons (http://commons.acquia.com/) site.
Since varnish caches some redirects (R=301, but not ...
4
votes
2answers
220 views
Forwarding 80 to 443 on Nagios woes
I perhaps just need some extra insight because I don't see where I'm going wrong.
I used an SSL Cert to secure our nagios server. We want to specifically require all traffic over nagios (like 2 users, ...
4
votes
4answers
611 views
How to set up a DNS to use a catch-all address?
This is not really a programming question, it's more about settings that I can alter visually.
I have bought a domain and am wondering how I can get it work in such a way that everything before the ...
4
votes
1answer
947 views
Don't use htpasswd if coming from local host
I have a development site that, for an additional layer of protection to keep preying eyes away, I have behind a htpasswd file. However, I'm getting tired of typing in the username and password when ...
4
votes
4answers
4k views
How can I password prompt certain IPs and allow all others free access using Apache?
SOLVED:
The idea is that if the visitor comes from China they have to pass a basic authentication. If you have any other IP address you can visit the site without being hassled (including proxies)
...
4
votes
1answer
227 views
Apache deflates .xml.gz files
I noticed an error in google webmaster tools regarding a gzipped version of a sitemap. Turns out the sitemap.xml.gz file is gzipped twice: one upon creation (as it should be) and another time when ...
4
votes
1answer
1k views
force https with apache before .htpasswd
I have this in my .htaccess file
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://www.myweb.com/phpmyadmin$1 [R,L]
AuthUserFile /var/www/myweb/.htpasswd
AuthGroupFile /dev/null
...
4
votes
4answers
5k views
.htaccess not working (mod_rewrite)
Edit: I am pretty sure my .htaccess file is NOT being executed, and the problem is NOT with my rewrite rules.
I have not having any luck getting my .htaccess with mod_rewrite working. Basically all ...
4
votes
1answer
1k views
Why would an .htaccess file result in 403 Forbidden when the only line is “Allow from all”?
I'm running a server:
Apache/2.2.8 (Ubuntu) mod_ssl/2.2.8 OpenSSL/0.9.8g
Without a .htaccess file, everyone can access the web content. However, I add a .htaccess file with the following content:
...
4
votes
1answer
2k views
htaccess redirect all to one file (except from localhost)
I want to redirect all traffic to a single .php gateway file, this file will do authentication and use ajax to pull the file that was requested.
So I need a .htaccess with flow like this:
if ...
4
votes
1answer
348 views
Why isn't htaccess following this php_value directive?
In .htaccess I've added
php_value session.name "SID"
This seems to have no effect, however, and no errors are thrown in error_log. Other rewrite rules in the same .htaccess file are working as ...
4
votes
2answers
624 views
Finding Webserver Vulnerability
We operate a webserver farm hosting around 300 websites.
Yesterday morning a script placed .htaccess files owned by www-data (the apache user) in every directory under the document_root of most (but ...
4
votes
2answers
1k views
Can I password protect a location (not directory) in apache using htaccess?
I have used code like this in apache configuration to protect locations with password
<Location ~ "/admin.*">
AuthType Basic
AuthName "Protected Area"
AuthUserFile ...
4
votes
2answers
3k views
ErrorDocument in .htaccess, is it possible to use relative path?
This doesn't work:
ErrorDocument 401 ../../src/wrong_pwd.php
it renders the path as text, it really prints
../../src/wrong_pwd.php
and doesn't output the real file.
If I put the absolute ...
4
votes
3answers
3k views
Allow using php_value and php_flag in .htaccess
I am running an Apache web server with PHP5 as a module (notice: as an Apache module, not CGI!).
In some of my .htaccess files (the one that comes with the gallery3 software, ...
4
votes
1answer
62 views
.htaccess help?
First, sorry for the shocking level of no-coding-skills. So what is probably best is that I describe what I want first.
I have 2 domain names, linking to one hosting package (yes, cheap-ass option, ...
4
votes
1answer
215 views
How to redirect elgantly many redirects in htaccess?
Q1. is it possible to further optimize / compact the following rules, thereby making the entire redirections faster and easier to maintain in future? There are about twenty of these domains!! you get ...
4
votes
1answer
742 views
Have .htaccess dynamically get RewriteBase
Depending on where I install my set of files, it seems like RewriteBase seems has to change accordingly if I install it in a subdirectory rather than at the www root.
For my configuration files, I ...
3
votes
1answer
294 views
Adding empty .htaccess gives 403 error
When I add an empty .htaccess file to server root (touch .htaccess) I get a 403 error. The samme error appears no matter what I put in the file (I've tried specifying <LIMIT> directives etc).
...
3
votes
2answers
800 views
Setup IIS to prompt for username/password Window instead of using a form?
On a linux box using .htaccess you can deny access to folders etc... and when the user attemps to visit that directory/file, a window pops up asking for username/password.
How would you do this on ...
3
votes
3answers
689 views
How to block Baidu from indexing MP3 files?
Using Apache I want to prevent people from directly downloading music via url. I just want the flash player to play it. However Baidu MP3 found the files and is establishing direct downloads to my ...
3
votes
2answers
63 views
Redirect absolutely anything to new domain with .htaccess
Ok, so I'm in need a simple redirect:
Redirect 301 / http://www.new.com/
Similar to that, except I want it to catch anything, such as:
...
3
votes
2answers
4k views
How to echo out from .htaccess?
We write a lot of code to htaccess but what is the best method to debug other than refreshing the page ?
Is there some way that I can write it out to a file ? or is there some echo/print function ?
...
3
votes
3answers
1k views
How can I upload/download or modify .htaccess files using WebDAV?
I've set up a Ubuntu server with Apache 2. Instead of FTP I'm using WebDAV upload/download files. Works great. But it is not possible to upload/download or modify .htaccess files, because the Apache ...
3
votes
3answers
60 views
What's the proper way to setup a client chosen domain name?
In my web app, I'm toying with the idea of giving my user the opportunity to select a subdomain of their choosing, so they could select something like:
foobar.myapp.com
where foobar is their chosen ...
3
votes
4answers
827 views
Basic Auth on DirectoryIndex Only
I am trying to configure basic auth for my index file, and only my index file. I have configured it like so:
<Files index.htm>
Order allow,deny
Allow from all
AuthType Basic
...
