Manolo wrote, On 15/01/07 10:19:
> RewriteCond %{QUERY_STRING} (\"|%22).*(\>|%3E|<|%3C).* [NC]
> RewriteRule ^(.*)$ error_logger.php [NC]
> RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC]
> RewriteRule ^(.*)$ error_logger.php [NC]
> RewriteCond %{QUERY_STRING} (javascript:).*(\;).* [NC]
> RewriteRule ^(.*)$ error_logger.php [NC]
> RewriteCond %{QUERY_STRING}
> (\;|\'|\"|\%22).*(union|select|insert|drop|update|md5|benchmark|or|and|if).*
> [NC]
> RewriteRule ^(.*)$ error_logger.php [NC]
> RewriteRule (,|;|<|>|'|`) log.php [NC]
Here you have (in the Cherokee 0.5 format):
===
Request "(\"|%22).*(\>|%3E|<|%3C).*" {
Handler redir { URL /log.php }
}
Request "(\<|%3C).*script.*(\>|%3E)" {
Handler redir { URL /log.php }
}
Request "(javascript:).*(\;).*" {
Handler redir { URL /log.php }
}
Request
"(\;|\'|\"|\%22).*(union|select|insert|drop|update|md5|benchmark|or|and|if).*" {
Handler redir { URL /log.php }
}
===
I have also tested it with Cherokee 0.6 (trunk). If the case you
want to try:
contrib/05to06.py < /tmp/this_conf > /tmp/this_conf-0.6
cherokee -C /tmp/this_conf-0.6
Cheers..
--
Greetings, alo.
_______________________________________________
Cherokee mailing list
[email protected]
http://cherokee-project.com/cgi-bin/mailman/listinfo/cherokee
