Blocking Specific URL Strings?

New Member Joined: Jan 14, 2005 Posts: 6

I have some jerk posting links into the comments field of the reviews section of one of my sites. He's using a script of some sort.

As I don't use the comments, I'm trying to de-activate them. Can anyone help?

1) My first thought is to use .htaccess. I am trying to prevent access to the first part of the string:
"modules.php... reviews.... =postcomment"(this isn't coming out right in the message)
but can't work out the comand to do it correctly (nothing seems to work).

Can anyone advise?

2) I've looked at the code in nuke, but can't work it out (I'm no programmer). Anyone know of a quick and eay block on this function?

3) Any other ideas?

I'm totally stuck now... so any help is valued.

Thanks.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Try the STRING blocker in NukeSentinel.

Posted: Fri Jan 14, 2005 5:10 pm

I haven't got NukeSentinel on this particular site. I'm just looking for a quickie: preferably with htaccess, but if not with a one line code change?

Is there a way?

Posted: Fri Jan 14, 2005 5:22 pm

Code:

RewriteCond %{QUERY_STRING} ^(.*)=postcomment(.*)      [NC]


RewriteRule ^.*$ http://127.0.0.1 [R,L]

That should direct it right back to his local machine.

Posted: Fri Jan 14, 2005 5:47 pm

Thank you so much. That's just what I needed.

The site is very static but has lots of info. This guy has been wrecking it for me by sticking dozens of links in every night. The only way I could stop him was to deactivate Reviews, which lost a lot of the good content.

Now I can re-activate again and have the site back up to full strength. No-one ever posts comments anyway.

Posted: Fri Jan 14, 2005 5:48 pm

Make sure you test it Smile

Posted: Fri Jan 14, 2005 5:57 pm

Good thinking. I just tried it and it didn't make any difference. I could still post by running the above URL string.

I stuck it in the main .htaccess in the root, exactly as above. Is that the right place, or is it intended for the \Reviews sub-directory? I always thought the main root htaccess would percolate down through all the sub-directories.

Posted: Fri Jan 14, 2005 6:19 pm

Put it in reviews. I'll test it too.

Posted: Fri Jan 14, 2005 6:23 pm

I just got it! Stupid me!

I didn't have: RewriteEngine on in the .htaccess at all.

Now, the question is, do I need anything like a RewriteEngine off to clean up? Or is it fine without?

Posted: Fri Jan 14, 2005 6:33 pm

I'm guessing there isn't actually a RewriteEngine off command. In which case I am a happy bunny. I've got my reviews back, and learned how to use this rewrite stuff a bit.

I'm very grateful. You are a gent. Thank you.

Posted: Fri Jan 14, 2005 6:34 pm

There is a rewriteEngine off, but it's not necessary here.