# CPG Dragonfly CMS


# Copyright (c) 2004-2006 by CPG-Nuke Dev Team, dragonflycms.org


# Released under the GNU GPL version 2 or any later version





# Remove the pound sign on these 3 for production sites


# if your server doesn't allow it then a Error 500 is given


# php_flag display_errors off


# php_value error_reporting 0


# php_flag register_globals 0





# flood protection





# deny most common except .php


<FilesMatch "\.(inc|tpl|h|ihtml|sql|ini|conf|bin|spd|theme|module)$">


  deny from all


</FilesMatch>





# disable access to config.php and .ht* from a browser


<FilesMatch "^(config\.php|\.ht)">


Deny from all


</FilesMatch>


<FilesMatch "error\.(php|gif)">


allow from all


</FilesMatch>





# if you use LEO, mod_rewrite is necessary


<IfModule mod_rewrite.c>


  RewriteEngine On





  # Check for Santy Worms and redirect them to a fail page


  #-------------------------------------------------------------------


  # Variant -1


  # uncomment if you dont use LWP


  # RewriteCond %{HTTP_USER_AGENT} ^LWP    [NC,OR]


  RewriteCond %{HTTP_USER_AGENT} Baidu    [NC,OR]


  # Variant -2


  RewriteCond %{REQUEST_URI} ^visualcoders [NC,OR]


  # Variant -3


  RewriteCond %{QUERY_STRING} rush=([^&]+) [NC,OR]


  # Variant -4


  RewriteCond %{HTTP:x-moz} ^prefetch [NC,OR]


  RewriteCond %{X-moz} ^prefetch [NC,OR]


  # block local file, sql and remote attacks


  RewriteCond %{QUERY_STRING} \=../        [NC,OR]


  RewriteCond %{QUERY_STRING} "%20UNION"  [NC,OR]


  RewriteCond %{QUERY_STRING} \=http://    [NC]


  # deny them


  RewriteRule ^.*$ - [F]


  #-------------------------------------------------------------------





  RewriteCond %{REQUEST_FILENAME} -f [OR]


  RewriteCond %{REQUEST_FILENAME} -d


  RewriteRule ^(.*)$ - [L]





  # if you use LEO and CPG-Nuke is installed in a sub-directory like '/html',


  # remove that # before RewriteBase and rename /html to the path of the sub-directory


  RewriteBase /


  # RewriteRule ^index\.html /index.php


  RewriteRule ^([a-zA-Z0-9_=+-]+)(/|\.html)$ index=$1 [L,S=5]


  RewriteRule ^([a-zA-Z0-9_]+)/([a-zA-Z0-9_]+)(/|\.html)$ index=$1&file=$2 [L,S=4]


  RewriteRule ^([a-zA-Z0-9_]+)/([a-zA-Z0-9_]+)$ index=$1&file=$2 [L,S=3]


  RewriteRule ^([a-zA-Z0-9_]+)/([a-zA-Z0-9_]+)/(.*)(/|\.html)$ index=$1&file=$2&$3 [L,S=1]


  RewriteRule ^([a-zA-Z0-9_]+)/(.*)(/|\.html)$ index=$1&file=index&$2  [L]


  RewriteRule ^index=(.*[^/])/(.*) index=$1&$2 [N,L]


  RewriteRule ^index=(.*) index.php?name=$1 [L]


</IfModule>





# use custom error pages if you wish


ErrorDocument 400 /error.php


ErrorDocument 401 /error.php


ErrorDocument 403 /error.php


ErrorDocument 404 /error.php


ErrorDocument 500 /error.php





# disallow index viewing (like ftp) of directory


# Remove # for production sites


# Options -Indexes





# for hosts that don't allow the above, we won't give people anything to look at


<IfModule mod_autoindex.c>


IndexIgnore *


</IfModule>





AddDefaultCharset utf-8

http://site.com/Your_Account/profile=Admin.html





http://site.com/News/topic=1.html





http://site.com/Your_Account/edit=reg_details.html





http://site.com/Your_Account/edit=avatar.html





http://site.com/Private_Messages/mode=post.html





http://site.com/Forums/posting/mode=editpost/p=1.html





http://site.com/Forums/posting/mode=quote/p=1.html

http://site.com/Private_Messages.html





http://site.com/Forums/viewtopic/t=1.html





http://site.com/News/article/sid=2.html





http://site.com/Forums/archives.html

# php_flag register_globals 0

order deny allow 


deny from all 

<table width="100%" border="0" cellpadding="0" cellspacing="0">


  <tr>


      <td class="hdr01"></td>


      <td class="hdr02"><a href="/"><img src="images/logo.gif" style="border:0;" alt="Forums" title="Forums" /></a></td>


      <td class="hdr03" align="center"></td>


  


    </tr>


  <tr><div class="headmenu">


<div id='cssmenu'>


<ul>


   <li class='active'><a href='/'><span>Home</span></a></li>


   <li><a href='/Forums.html'><span>Forums</span></a></li>


   <li><a href='/Downloads.html'><span>Downloads</span></a></li>


   <li class='has-sub'><a style="cursor: pointer;"><span>News</span></a>


      <ul>


   <li class='last'><a href='/Topics.html'><span>Topics</span></a></li>


   <li class='last'><a href='/Stories_Archive.html'><span>Stories Archive</span></a></li>


      </ul>


   </li>





   <li class='has-sub'><a style="cursor: pointer;"><span>Login / Register</span></a>


      <ul>


   <li class='last'><a href='/Your_Account.html'><span>Login</span></a></li>


   <li class='last'><a href='/Your_Account/register.html'><span>Register</span></a></li>


      </ul>





   <li class='has-sub'><a style="cursor: pointer;"><span>Extra Links</span></a>


      <ul>


   <li class='last'><a href='/Forums/archives.html'><span>Forum Archives</span></a></li>


   <li class='last'><a href='/Forums/search.html'><span>Search</span></a></li>


   <li class='last'><a href='/Members_List.html'><span>Members List</span></a></li>


   <li class='last'><a href='/Forums/faq.html'><span>FAQ</span></a></li>


      </ul>


       </li>


</ul>


</div></div>


  </td>


</table>