LiteSpeed Technologies
Download Download     Blog Blog     Wiki Wiki     Forum Forum     Store     Contact Contact    

Go Back   LiteSpeed Support Forums > LiteSpeed Web Server > General > [Resolved]HTAccess rewrite errors in LSAPI logs

Reply
 
Thread Tools Display Modes
  #1  
Old 09-20-2010, 08:27 AM
jp0p! jp0p! is offline
New Member
 
Join Date: Sep 2010
Posts: 2
Default [Resolved]HTAccess rewrite errors in LSAPI logs

Hi,
I have the following rewrite rule in the htaccess file for each account on my LiteSpeed server but I am getting errors reported in the logs. I believe this rewrite is ok in Apache.

Code:
RewriteCond %{QUERY_STRING} ^.* (globals|encode|request|union|select|insert|cast|set|declare|drop|update|md5|benchmark|loopback).* [NC,OR]
The errors I receive are:
[[HTAccess]] rewrite: '[' is expected while parsing: RewriteCond %{QUERY_STRING} ^.* (globals|encode|request|union|select|insert|cast|s et|declare|drop|update|md5|benchmark|loopback).* [NC,OR]
[[HTAccess]] rewrite: invalid rewrite condition while parsing: RewriteCond %{QUERY_STRING} ^.* (globals|encode|request|union|select|insert|cast|s et|declare|drop|update|md5|benchmark|loopback).* [NC,OR]


Should I be doing something different to help block these exploits?

Last edited by NiteWave; 09-21-2010 at 08:28 AM..
Reply With Quote
  #2  
Old 09-21-2010, 01:59 AM
NiteWave NiteWave is offline
LiteSpeed Staff
 
Join Date: Sep 2009
Posts: 2,216
there is a extra space in the string:
Quote:
^.* (globals
remove it and works.

it can be simplified as
Code:
RewriteCond %{QUERY_STRING} globals|encode|request|union|select|insert|cast|set|declare|drop|update|md5|benchmark|loopback [NC,OR]
Reply With Quote
  #3  
Old 09-21-2010, 06:20 AM
jp0p! jp0p! is offline
New Member
 
Join Date: Sep 2010
Posts: 2
Ah, wonderful! thanks!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -7. The time now is 04:08 PM.



- Archive - Top
© Copyright 2003-2011 LiteSpeed Technologies, Inc. All rights reserved. Privacy Policy.