Suggestions for setting .htaccess for Sentinel

dcasmr · Worker Joined: Feb 06, 2004 Posts: 147

Hi all,

Can anyone suggest what is good to have in .htaccess based on your own experience of bad things to ban / exclude etc?
Also is .staccess required? The file is blank.

Thanks,
dcasmr

Options All -Indexes
DirectoryIndex index.php index.htm index.html

# -------------------------------------------
# Start of NukeSentinel(tm) admin.php Auth
# -------------------------------------------
<Files .staccess>
deny from all
</Files>

<Files admin.php>
<Limit GET POST PUT>
require valid-user
</Limit>
AuthName "Restricted"
AuthType Basic
AuthUserFile /path/to/your/.staccess

#Check for Santy Worms and redirect them to a fake page
RewriteCond %{HTTP_USER_AGENT} ^LWP [NC,OR]
RewriteCond %{REQUEST_URI} ^visualcoders [NC,OR]
RewriteCond %{QUERY_STRING} rush=([^&]+) [NC,OR]
RewriteCond %{REQUEST_URI} ^envidiosos [NC,OR]
RewriteCond %{REQUEST_URI} ^civa [NC,OR]
#variant-6 redirect all inner

Only registered users can see links on this board!
Get registered or login to the forums!

request
RewriteCond %{QUERY_STRING} ^(.*)http://(.*) [NC,OR]
#variant-7 redirect all inner http request regardless if encoded
RewriteCond %{QUERY_STRING} ^(.*)http%3A%2F%2F(.*) [NC]
RewriteRule ^.*$

Only registered users can see links on this board!
Get registered or login to the forums!

[R,L]

</Files>

# -------------------------------------------
# Start of NukeSentinel(tm) DENY FROM area
# -------------------------------------------

Raven · Posted: Wed Jan 05, 2005 5:13 am

That's fine for .htaccess. .staccess is only required if you are using CGIAuth instead of HTTPAuth.

nb · New Member Joined: Jan 07, 2005 Posts: 4

i have a neuromuscular diseases (MITO) legally blind
its hard to type and see all the codeing
my site was hacked 2 times
http://nb-productions.com/ i have install Nuke Sentinel
but dont no if its set up right htaccess ect any way you can look and see run a
test ? Bob Marion was going to look at it for me but he has ben busy e-mail me at

Only registered users can see links on this board!
Get registered or login to the forums!

if you can help

nb · New Member Joined: Jan 07, 2005 Posts: 4

nb, to late site was hacked makes 3 times will not hacked this time just deface

Only registered users can see links on this board!
Get registered or login to the forums!

Raven · Posted: Sat Jan 08, 2005 1:46 am

Would you like me to install/setup NukeSentinel on your site?

nb · New Member Joined: Jan 07, 2005 Posts: 4

yes if you have the time tell me what info you will need send to

Only registered users can see links on this board!
Get registered or login to the forums!

ill send the info back