Was hacked tonight.. .htaccess questions

Client Joined: Sep 18, 2004 Posts: 62

Hi all,

The brazillians hacked my site tonight. I've popped it back up, but I am wary of the .htaccess file because when I upload it, it disappears from my ftp client view. What am I doing wrong?

Before dropping it into my site, I edited these two lines in it:

Code:

allow from all


Deny from 200

I've also banned 200.*.*.* using nuke sentinal.

I am not sure, but I think the logs were deleted. I had an exhausting day, so maybe I just can't find them. Sad

Posted: Mon May 23, 2005 8:42 pm

Make sure you have your ftp client set to vew hidden files. .htaccess is hidden by default.

Posted: Tue May 24, 2005 7:22 pm

thanks! worked. So do I have the .htaccess set right?

Posted: Tue May 24, 2005 8:49 pm

That I am not quite sure about. Mine looks like this:

Code:

RewriteEngine on 


#The next lines check for Email Spammers Robots and redirect them to a fake page 


#Check for Santy Worms and redirect them to a fake page 


RewriteCond %{HTTP_USER_AGENT} ^LWP                   [NC,OR] 


RewriteCond %{REQUEST_URI} ^visualcoders              [NC,OR] 


RewriteCond %{QUERY_STRING} rush=([^&]+)              [NC,OR] 


RewriteCond %{REQUEST_URI} ^envidiosos                [NC,OR] 


RewriteCond %{REQUEST_URI} ^civa                      [NC,OR] 


#variant-6 redirect all inner http:// request 


RewriteCond %{QUERY_STRING} ^(.*)http://(.*)            [NC,OR] 


#variant-7 redirect all inner http request regardless if encoded 


RewriteCond %{QUERY_STRING} ^(.*)http%3A%2F%2F(.*)      [NC] 


RewriteRule ^.*$ http://127.0.0.1 [R,L]


PHP_FLAG output_buffering on





deny from 4.43.114.8


deny from 69.166.185.116


deny from 66.196.90.56


deny from 4.43.114.8


deny from 128.208.6.141


deny from 64.246.165.170


deny from 68.103.60.86


deny from 198.54.202.82


deny from 10.64.10.152


deny from 63.238.163


deny from 64.246.165.150


deny from 64.246.165.160


deny from 69.148.96.231


deny from 63.242.77.34


deny from 64.246.165.190

All of the deny from were added by Sentinel

As for blocking the Brazilians... Quite a few people suggest that using Sentinel you ban the entire country using the Import Data -> Import to blocked ranges