XSS Protection

What is XSS protection ?<br> XSS mean <span class="st">Cross-site scripting is a type of computer security vulnerability typically found in Web applications. Due to breaches of browser security, XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007. Their effect may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner. More information about XSS <a href="http://en.wikipedia.org/wiki/Cross-site_scripting" target="_blank">you can read here</a>.</span><br>

XSS Protection

What is XSS protection ? XSS mean Cross-site scripting is a type of computer security vulnerability typically found in Web applications. Due to breaches of browser security, XSS enables attackers to i…

Read more »

Single error PHP file

<div class="tr_bq"> <br></div> <br> Very useful if you point all your error pages to the same file. Save more space and easy to handle it.. rite ?<br> This is a sample 'REDIRECT_STATUS' to your error page. First you need to use .htaccess file to point your 'REDIRECT_STATUS' to one file. Use this code<br> <br> <br> <pre style="font-family:arial;font-size:12px;border:1px dashed #CCCCCC;width:99%;height:auto;overflow:auto;background:#f0f0f0;;background-image:URL(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioGLmb-hQK_k3NcEuv4M23qo1WEp4FA9B4ou74WhFZAEWlK1bStKo3-M7hK3PeqxKIwAWrmgJb4fkpIQPSok8c64L0jLBtgCu9h9xzw9-40YQhAlVZa0hqyoLNS-nVSPOhkg0lRN9TRLhC/s320/codebg.gif);padding:0px;color:#000000;text-align:left;line-height:20px;"><code style="color:#000000;word-wrap:normal;"> # .htaccess file. ErrorDocument 404 /error-msg.php ErrorDocument 500 /error-msg.php ErrorDocument 400 /error-msg.php ErrorDocument 401 /error-msg.php ErrorDocument 403 /error-msg.php # End of file. </code></pre>

Single error PHP file

Very useful if you point all your error pages to the same file. Save more space and easy to handle it.. rite ? This is a sample 'REDIRECT_STATUS' to your error page. First you need to use .htaccess f…

Read more »

Block fingerprinting attack

<br> <br> Referrer filtering for common media files. Replace with your own domain name.This blocks most common fingerprinting attacks ;)<br> Note: Change www\.example\.com with your own domain name, substituting the dots with \.  i.e. use www\.example\.com for www.example.com<br> <br> <blockquote class="tr_bq"> <pre style="font-family:arial;font-size:12px;border:1px dashed #CCCCCC;width:99%;height:auto;overflow:auto;background:#f0f0f0;;background-image:URL(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioGLmb-hQK_k3NcEuv4M23qo1WEp4FA9B4ou74WhFZAEWlK1bStKo3-M7hK3PeqxKIwAWrmgJb4fkpIQPSok8c64L0jLBtgCu9h9xzw9-40YQhAlVZa0hqyoLNS-nVSPOhkg0lRN9TRLhC/s320/codebg.gif);padding:0px;color:#000000;text-align:left;line-height:20px;"><code style="color:#000000;word-wrap:normal;"> RewriteRule ^images/stories/([^/]+/)*([^/.]+\.)+(jp(e?g|2)?|png|gif|bmp|css|js|swf|ico)$ - [L] RewriteCond %{HTTP_REFERER} . RewriteCond %{HTTP_REFERER} !^http?://(www\.)?localhost\/ [NC] RewriteCond %{HTTP_REFERER} !^http?://(www\.)?example\.com [NC] RewriteCond %{REQUEST_FILENAME} -f RewriteRule \.(jp(e?g|2)?|png|gif|bmp|css|js|swf|ico)$ - [F] </code></pre></blockquote>

Block fingerprinting attack

Referrer filtering for common media files. Replace with your own domain name.This blocks most common fingerprinting attacks ;) Note: Change www\.example\.com with your own domain name, substituting t…

Read more »

Spammers, bad bots and some proxies

<pre style="font-family:arial;font-size:12px;border:1px dashed #CCCCCC;width:99%;height:auto;overflow:auto;background:#f0f0f0;;background-image:URL(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioGLmb-hQK_k3NcEuv4M23qo1WEp4FA9B4ou74WhFZAEWlK1bStKo3-M7hK3PeqxKIwAWrmgJb4fkpIQPSok8c64L0jLBtgCu9h9xzw9-40YQhAlVZa0hqyoLNS-nVSPOhkg0lRN9TRLhC/s320/codebg.gif);padding:0px;color:#000000;text-align:left;line-height:20px;"><code style="color:#000000;word-wrap:normal;"> RewriteCond %{REMOTE_HOST} 12.226.240.248 [OR] RewriteCond %{REMOTE_HOST} 24.111.102.26 [OR] RewriteCond %{REMOTE_HOST} 24.117.121.113 [OR] RewriteCond %{REMOTE_HOST} 65.30.216.140 [OR] RewriteCond %{REMOTE_HOST} 67.87.64.23 [OR] RewriteCond %{REMOTE_HOST} 68.12.149.198 [OR] RewriteCond %{REMOTE_HOST} 69.139.167.203 [OR] RewriteCond %{REMOTE_HOST} 74.95.182.57 [OR] RewriteCond %{REMOTE_HOST} 91.121.3.29 [OR] RewriteCond %{REMOTE_HOST} 203.94.229.227 [OR] RewriteCond %{REMOTE_HOST} 208.96.122.142 [OR] RewriteCond %{REMOTE_HOST} 210.0.141.247 [OR] RewriteCond %{REMOTE_HOST} 210.197.97.67 [OR] RewriteCond %{REMOTE_HOST} 212.179.127.188 [OR] RewriteCond %{REMOTE_HOST} 216.246.60.183 [OR] RewriteCond %{REMOTE_HOST} 220.156.189.233 [OR] RewriteCond %{REMOTE_HOST} 222.36.12.42 [OR] # Abuse Agent Blocking </code></pre>

Spammers, bad bots and some proxies

RewriteCond %{REMOTE_HOST} 12.226.240.248 [OR] RewriteCond %{REMOTE_HOST} 24.111.102.26 [OR] RewriteCond %{REMOTE_HOST} 24.117.121.113 [OR] RewriteCond %{REMOTE_HOST} 65.30.216.140 [OR] R…

Read more »