PDA

View Full Version : rewrite code?



Icupid
25-06-2008, 09:50 PM
Does anyone know the rewrite code for phpfox ?

as i need to add it to my htaccess file.

thanks.

Independent
25-06-2008, 10:04 PM
Does anyone know the rewrite code for phpfox ?

as i need to add it to my htaccess file.

thanks.
tell us the profile links

is it like profileview.php?user=lol



AddHandler application/x-httpd-php5 .php

Options +FollowSymLinks
RewriteEngine on
RewriteRule profile/(.*) profile2.php?user=$1
RewriteRule action/(.*) action.php?f=$1
RewriteRule player/(.*) playercore.php?p=$1
RewriteRule blogs/(.*) nivadeblogs.php?a=$1


Thats my rewrite, but I'm made my system with Pixzo (HxF User)

Source
26-06-2008, 10:22 AM
I like it how you made out as if you made that code ^.^ Even though its just a generator on the internet :).

But yes, look at how that works by grabbing the data after the slash and then formatting it in to the correct URL (of which of course is hidden thanks to rewrite module).

Agnostic Bear
26-06-2008, 10:55 AM
tell us the profile links

is it like profileview.php?user=lol



AddHandler application/x-httpd-php5 .php

Options +FollowSymLinks
RewriteEngine on
RewriteRule profile/(.*) profile2.php?user=$1
RewriteRule action/(.*) action.php?f=$1
RewriteRule player/(.*) playercore.php?p=$1
RewriteRule blogs/(.*) nivadeblogs.php?a=$1
Thats my rewrite, but I'm made my system with Pixzo (HxF User)

Welcome to exploit alley, don't ever use wildcards for any character unless you intend to use any character, usernames shouldn't have stupid characters like ~$@")(£!("$*() in them. They should be alphanumeric with no spaces.

Source
26-06-2008, 10:57 AM
but surely you can handle that in the php?

I mean I always filter them out in htaccess but it has never occured to me personally that it would be a huge exploit hole.

edit // this is how I have mine (originally from Greg)



RewriteEngine on
RewriteRule ^([A-Za-z0-9-]+)/?$ profile.php?username=$1 [L]

Agnostic Bear
26-06-2008, 01:42 PM
but surely you can handle that in the php?

I mean I always filter them out in htaccess but it has never occured to me personally that it would be a huge exploit hole.

edit // this is how I have mine (originally from Greg)



RewriteEngine on
RewriteRule ^([A-Za-z0-9-]+)/?$ profile.php?username=$1 [L]


It's not a huge exploit if you handle it in the PHP, but alot of people here wont realize it until it's too late.

Want to hide these adverts? Register an account for free!