LITTLEBLACKDOG.COM

Posted: Sun Dec 03, 2006 8:58 am Post subject:

I've found it in the htaccess. I don't think this is required by Looneypages but I do think they've provided it for us to use.

I'm leaving it in. It's another line of defense against malevolent types.

It looks like you have to work at it to run into it as a problem. Edit your post if it does.

Wink

I had to edit this post because I forgot that putting a dot in front of the aitch-tee-ak-sess name is illegal. It's caught me before.

Posted: Sun Dec 03, 2006 2:33 pm Post subject:

EdisonRex wrote:
I've found it in the htaccess. I don't think this is required by Looneypages but I do think they've provided it for us to use.

I'm leaving it in. It's another line of defense against malevolent types.

It looks like you have to work at it to run into it as a problem. Edit your post if it does.

I had to edit this post because I forgot that putting a dot in front of the aitch-tee-ak-sess name is illegal. It's caught me before.

I would still recommend looking into the error document and putting in a message indicating that certain words are not allowed and to review their text, in place of a regular unauthorized error document which indicates something is configured incorrectly on the server or php-bb.

It looks like you can configure the default status in the htaccess file:

Quote:
# By default log and deny suspicious requests
# with HTTP status 500
SecFilterDefaultAction "deny,log,status:500"

If you were to use status code 403 (Forbidden), or 306(Unused) or 402(Payment Required)

Also, it appears that custom error documents are defined but not created/found as specified:

Quote:
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Posted: Sun Dec 03, 2006 3:25 pm Post subject:

Got it. thanks. I'll put it on the list of things to do before I go to bed.
Wink

Butt Sniffer Joined: 09 Nov 2000 Posts: 1883

EdisonRex wrote:
Got it. thanks. I'll put it on the list of things to do before I go to bed.

Maybe also do a meta-refresh to send them back to the post page after explaining certain things are not allowed.

And maybe list what they did that was wrong, since it may not be obvious to the average poster.

You don't need sleep.

Posted: Fri Jan 12, 2007 9:13 pm Post subject:

EdisonRex wrote:
Got it. thanks. I'll put it on the list of things to do before I go to bed.

So, have you made it to bed yet? Laughing

http://littleblackdog.com/viewtopic.php?t=44190