.htaccess - mod_rewrite deny acces if parameter equals something -
.htaccess - mod_rewrite deny acces if parameter equals something -
i have urls like mydomain.com?act=somethingbad mydomain.com?act=somethingworse and mydomain.com?act=somethinggood mydomain.com?act=somethingbetter
i need create bad actions forbidden. tried like:
rewritecond %{query_string} act=(.*) rewritecond %{query_string} act=[^(somethinggood)] rewriterule ^(.*) - [f]
because have more bad actions want exclude de actions rule. above illustration doesn't work.
any ideas?
use these rules:
rewritecond %{query_string} (^|&)act=(.*) rewritecond %{query_string} !(^|&)act=(somethinggood|somethingbetter)(&|$) rewriterule ^(.*) - [f]
parameter act
can (e.g. http://example.com/?act=somethinggood
, http://example.com/?mode=happy&act=somethinggood
, http://example.com/?mode=happy&act=somethinggood&extra=yes
ok)
if have empty value act
parameter, rejected (e.g. http://example.com/?act=
treated bad parameter)
based on url examples have provided, rule applied urls have act
parameter in query string.
.htaccess mod-rewrite
Comments
Post a Comment