| ||||||||||||||||
|
Приветствую, господа вы случайно не про http://void.ru/content/847 говорите ? я написал рулезы для mod_rewrite в контексте директорий userdir (public_html или как у кого) червяк пытается запрашивать /scripts/..%255c.. /_vti_bin/..%255c../..%255c../..%255c.. /_mem_bin/..%255c../..%255c../..%255c.. /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..% /scripts/..%c1%1c.. /scripts/..%c0%2f.. /scripts/..%c0%af.. /scripts/..%c1%9c.. /scripts/..%%35%63.. /scripts/..%%35c.. /scripts/..%25%35%63.. /scripts/..%252f.. Соответствующие рулезы для отправки его по адресу: RewriteRule ^/scripts/..(.*) /dev/null RewriteRule ^/msadc(.*) /dev/null RewriteRule ^/_vti_bin/..\%(.*) /dev/null RewriteRule ^/_mem_bin/..\%(.*) /dev/null .d ============================================================================= = Apache-Talk@xxxxxxxxxxxxx mailing list = Mail "unsubscribe apache-talk" to majordomo@xxxxxxxxxxxxx if you want to quit. = Archive avaliable at http://www.lexa.ru/apache-talk =
"Russian Apache" includes software developed
by the Apache Group for use in the Apache HTTP server project
(http://www.apache.org/) See
Apache LICENSE. Copyright (C) 1995-2001 The Apache Group. All rights reserved. Copyright (C) 1996 Dm. Kryukov; Copyright (C) 1997-2009 |
|
|