Search found 14 matches

I've tried a cut down version of the file; details below:

ErrorDocument 400 http://www.domain.net/modules.php?name=DisError&file=index&func=error400
ErrorDocument 401 http://www.do ...

this is what I got:

is this ok?

RewriteEngine on

#The next lines check for Email Spammers Robots and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT} ^Java [NC,OR ...

RewriteEngine on
#The next lines check for Email Spammers Robots and redirect them to a fake page
#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT} ^L ...

When those attacks were being made, people were trying to stop it with .htaccess directives. Several folks posted these for stop Santy and possibly other attacks:

RewriteCond %{HTTP_USER_AG ...

Combine the two.
Thanks.

What's the diff. between these 2 ?

RewriteRule ^.*$ http://127.0.0.1 [R,L]
RewriteRule ^.*$ http://www.goawayanddontcomeback.com [L]

Have ...

If you have access to .htaccess, then don't use the NukeSentinel code. Use this insteadRewriteEngine on
#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT ...

That I am not quite sure about. Mine looks like this:

RewriteEngine on
#The next lines check for Email Spammers Robots and redirect them to a fake page
#Check for Santy Worms and redirect them ...

That's a Santy Worm exploit. Are you using NukeSentinel(tm)?

Paste this code in your .htaccess fileRewriteEngine on
#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTT ...

Mine looks like this:

<FilesMatch "\.(inc|tpl|h|ihtml|sql|ini|conf|class|bin|spd|theme|module)$">
</FilesMatch>
<Limit GET PUT POST>
Order Allow,Deny
All ...

RewriteEngine on
#The next lines check for Email Spammers Robots and redirect them to a fake page
#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT} ^L ...

Hi all,

Can anyone suggest what is good to have in .htaccess based on your own experience of bad things to ban / exclude etc?
Also is .staccess required? The file is blank.

Thanks,
dcasmr

...

#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT} ^LWP [NC,OR]
RewriteCond %{REQUEST_URI} ^visualcoders [N ...

#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT} ^LWP [NC,OR]
RewriteCond %{REQUEST_URI} ^visualcoders [N ...

Hia all,

Perhaps we could redirect all queries containin' the "http://" string in a way:

#variant-5 redirect all inner http:// request
RewriteCond %{QUERY_STRING} ^(.*)http://(.*) [ ...

Author	Message
Topic: random site errors- 200, etc. Nuke 7.6 patched
AndyB Replies: 15 Views: 24480	Forum: Bug Fixes Posted: Sat Jul 11, 2009 2:40 am Subject: re: random site errors- 200, etc. Nuke 7.6 patched
AndyB Replies: 15 Views: 24480	I've tried a cut down version of the file; details below: ErrorDocument 400 http://www.domain.net/modules.php?name=DisError&file=index&func=error400 ErrorDocument 401 http://www.do ...
Topic: huge bot attack - site suspend
prekill Replies: 31 Views: 56060	Forum: Security - PHP Nuke Posted: Fri Aug 08, 2008 1:36 pm Subject: huge bot attack - site suspend
prekill Replies: 31 Views: 56060	this is what I got: is this ok? RewriteEngine on #The next lines check for Email Spammers Robots and redirect them to a fake page RewriteCond %{HTTP_USER_AGENT} ^Java [NC,OR ...
Topic: Sentinel 2.2.0 and Forum Search - Possible Santy Worm Attack
blith Replies: 17 Views: 52949	Forum: NukeSentinel(tm) Bug Reports Posted: Tue Oct 10, 2006 8:43 pm Subject: Re: Sentinel 2.2.0 and Forum Search - Possible Santy Worm At
blith Replies: 17 Views: 52949	RewriteEngine on #The next lines check for Email Spammers Robots and redirect them to a fake page #Check for Santy Worms and redirect them to a fake page RewriteCond %{HTTP_USER_AGENT} ^L ...
Topic: santy worm and the word rush
montego Replies: 7 Views: 13310	Forum: NukeSentinel(tm) Posted: Thu Sep 28, 2006 5:55 am Subject: re: santy worm and the word rush
montego Replies: 7 Views: 13310	When those attacks were being made, people were trying to stop it with .htaccess directives. Several folks posted these for stop Santy and possibly other attacks: RewriteCond %{HTTP_USER_AG ...
Topic: Santy worm false alarm caused by Hebrew search
ring_c Replies: 5 Views: 11373	Forum: NukeSentinel(tm) Bug Reports Posted: Tue Jun 21, 2005 5:09 am Subject: Santy worm false alarm caused by Hebrew search
ring_c Replies: 5 Views: 11373	Combine the two. Thanks. What's the diff. between these 2 ? RewriteRule ^.$ http://127.0.0.1 [R,L] RewriteRule ^.$ http://www.goawayanddontcomeback.com [L] Have ...
Topic: Santy worm false alarm caused by Hebrew search
Raven Replies: 5 Views: 11373	Forum: NukeSentinel(tm) Bug Reports Posted: Tue Jun 21, 2005 12:25 am Subject: Santy worm false alarm caused by Hebrew search
Raven Replies: 5 Views: 11373	If you have access to .htaccess, then don't use the NukeSentinel code. Use this insteadRewriteEngine on #Check for Santy Worms and redirect them to a fake page RewriteCond %{HTTP_USER_AGENT ...
Topic: Was hacked tonight.. .htaccess questions
CurtisH Replies: 3 Views: 6451	Forum: Security - PHP Nuke Posted: Tue May 24, 2005 8:49 pm Subject: Was hacked tonight.. .htaccess questions
CurtisH Replies: 3 Views: 6451	That I am not quite sure about. Mine looks like this: RewriteEngine on #The next lines check for Email Spammers Robots and redirect them to a fake page #Check for Santy Worms and redirect them ...
Topic: Have I been Hacked???
Raven Replies: 4 Views: 8627	Forum: Security - PHP Nuke Posted: Fri May 20, 2005 6:26 pm Subject: Have I been Hacked???
Raven Replies: 4 Views: 8627	That's a Santy Worm exploit. Are you using NukeSentinel(tm)? Paste this code in your .htaccess fileRewriteEngine on #Check for Santy Worms and redirect them to a fake page RewriteCond %{HTT ...
Topic: Nuke Sentinal .htaccess and Google Tap Next Gen
64bitguy Replies: 3 Views: 8319	Forum: Security - PHP Nuke Posted: Tue Apr 26, 2005 10:06 am Subject: Nuke Sentinal .htaccess and Google Tap Next Gen
64bitguy Replies: 3 Views: 8319	Mine looks like this: <FilesMatch "\.(inc\|tpl\|h\|ihtml\|sql\|ini\|conf\|class\|bin\|spd\|theme\|module)$"> </FilesMatch> <Limit GET PUT POST> Order Allow,Deny All ...
Topic: Sentinel 2.2.0 and Forum Search - Possible Santy Worm Attack
Raven Replies: 17 Views: 52949	Forum: NukeSentinel(tm) Bug Reports Posted: Tue Mar 15, 2005 6:29 pm Subject: Sentinel 2.2.0 and Forum Search - Possible Santy Worm Attack
Raven Replies: 17 Views: 52949	RewriteEngine on #The next lines check for Email Spammers Robots and redirect them to a fake page #Check for Santy Worms and redirect them to a fake page RewriteCond %{HTTP_USER_AGENT} ^L ...
Topic: Suggestions for setting .htaccess for Sentinel
dcasmr Replies: 5 Views: 6073	Forum: NukeSentinel(tm) Posted: Sun Jan 02, 2005 5:32 pm Subject: Suggestions for setting .htaccess for Sentinel
dcasmr Replies: 5 Views: 6073	Hi all, Can anyone suggest what is good to have in .htaccess based on your own experience of bad things to ban / exclude etc? Also is .staccess required? The file is blank. Thanks, dcasmr ...
Topic: rewiews module stopped working after uprading to 2.1.3
manunkind Replies: 45 Views: 98829	Forum: NukeSentinel(tm) Bug Reports Posted: Fri Dec 31, 2004 7:57 pm Subject: rewiews module stopped working after uprading to 2.1.3
manunkind Replies: 45 Views: 98829	#Check for Santy Worms and redirect them to a fake page RewriteCond %{HTTP_USER_AGENT} ^LWP [NC,OR] RewriteCond %{REQUEST_URI} ^visualcoders [N ...
Topic: rewiews module stopped working after uprading to 2.1.3
Raven Replies: 45 Views: 98829	Forum: NukeSentinel(tm) Bug Reports Posted: Thu Dec 30, 2004 5:42 pm Subject: rewiews module stopped working after uprading to 2.1.3
Raven Replies: 45 Views: 98829	#Check for Santy Worms and redirect them to a fake page RewriteCond %{HTTP_USER_AGENT} ^LWP [NC,OR] RewriteCond %{REQUEST_URI} ^visualcoders [N ...
Topic: Santy Worm attach prevention - RECAP
yaanno Replies: 84 Views: 117489	Forum: Security - PHP Nuke Posted: Wed Dec 29, 2004 4:40 am Subject: Santy Worm attach prevention - RECAP
yaanno Replies: 84 Views: 117489	Hia all, Perhaps we could redirect all queries containin' the "http://" string in a way: #variant-5 redirect all inner http:// request RewriteCond %{QUERY_STRING} ^(.)http://(.) [ ...