htaccess query string

Started by achieve, Feb 05 2012, 21:27

You cannot reply to this topic

1 reply to this topic

#1 achieve

Community Member
37 posts

Real Name:Declan Connolly

@Mention

Posted 05 February 2012, 21:27

Hi,
I have installed Crafty Syntax Chat on the same server as a modified OSC 2.2 installation. However, for this software to work a query string is injected into a particular file. However, my htaccess file has the following line which prevent this.

RewriteCond %{QUERY_STRING} (\_|%3C).*script.*(\_|%3E) [NC,OR]

If I comment this out the live chat program works fine. However, I would prefer not to remove this from my htaccess file for security reasons on my main site.

Any suggestions or is it possible to make an exception for one file?

Thanks,
Declan.

Back to top

#2 mattjt83

Community Member
108 posts

Real Name:Matt Toste
Gender:Male
Location:CA, USA

@Mention

Posted 05 February 2012, 23:38

I have also been dealing with this issue when installing checkout by amazon. The transactions cannot be completed because they pass data back in the query string to my site... It would be nice to know a workaround.

Matt

Back to top

Back to Security · Next Unread Topic →