小故事:黑客用一些奇怪的扩展名添加了一百万个页面(例如.drf)
现在,我想通过htaccess发出410报头。这是我到目前为止所拥有的,但没有工作:
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !\.dfr$
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
RewriteRule ^.*\.dfr$ - [R=410]
# Not sure if I really need this, but whatever
ErrorDocument 404 default有了这个,我仍然得到wordpress 404页面,所以很明显有些东西丢失了/出错了
更新:
我试过了。同样的结果(wordpress 404)。还有一些缓存规则,来自一个流行的插件,但没有把它们放进去
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/cpanel-dcv/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
ErrorDocument 404 default
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule \.dfr$ - [NC,G,L]
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress发布于 2018-08-14 01:57:54
将此规则添加到RewriteBase行的正下方:
RewriteRule \.dfr$ - [NC,G,L]您还可以使用标志[NC,F]来返回更合适的403 (禁止)。
https://stackoverflow.com/questions/51827986
复制相似问题