.htaccess - mod_rewrite deny acces if parameter equals something -



.htaccess - mod_rewrite deny acces if parameter equals something -

i have urls like mydomain.com?act=somethingbad mydomain.com?act=somethingworse and mydomain.com?act=somethinggood mydomain.com?act=somethingbetter

i need create bad actions forbidden. tried like:

rewritecond %{query_string} act=(.*) rewritecond %{query_string} act=[^(somethinggood)] rewriterule ^(.*) - [f]

because have more bad actions want exclude de actions rule. above illustration doesn't work.

any ideas?

use these rules:

rewritecond %{query_string} (^|&)act=(.*) rewritecond %{query_string} !(^|&)act=(somethinggood|somethingbetter)(&|$) rewriterule ^(.*) - [f]

parameter act can (e.g. http://example.com/?act=somethinggood , http://example.com/?mode=happy&act=somethinggood , http://example.com/?mode=happy&act=somethinggood&extra=yes ok)

if have empty value act parameter, rejected (e.g. http://example.com/?act= treated bad parameter)

based on url examples have provided, rule applied urls have act parameter in query string.

.htaccess mod-rewrite

Comments

Popular posts from this blog

c# - Move local mssql database to webhosted MYSQL -

java - How to pass parameters between Request-Scoped Controllers? -

string - what is the difference between "some" == "some\0" and strcmp("some","some\0") in c++? -