Tag Info

New answers tagged

0

You can use regex in server_name in order to get the TLD in a variable: server_name ~(www\.)?domain\.(?<tld>\w+)$; Now you can use it: rewrite ^(.*)$ /$tld/$1;


1

As the query change the order of the parameters and be still exploitable and I am not very proficient in mod_security, I would probably use mod_rewrite to block it: In the conf file of your apache server where all the stuff to configure Joomla are, add the following: RewriteCond %{QUERY_STRING} option=com_media RewriteCond %{QUERY_STRING} view=images ...



Top 50 recent answers are included