Hacked: External scripts called from my site

webharvest · **Joined:** Fri Apr 27, 2007 3:31 pm **Posts:** 115

One of my problems is that I have an mp3 player in my site calls to play the mp3 on my server from a link like http://xxxxxx. When I have the rewrite with http called out the player doesn't work. I need to see if there is a way around that so it will let it run if it is a link to my url only? Maybe I can change my php file for the player also.

I was a little confused from the original post you (MnM-Design) had because it had three code blocks. The third one said "So the entire "Rewrite rules to block out some common exploits" block looks like this:" so I took it that you suggested only putting in the code from the third block and not all three.

Thanks

guysmiley · **Posted:** Sat Nov 15, 2008 1:33 pm

Quote:

########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
#IF the URI contains a "http:" or "ftp:" or "https"
RewriteCond %{QUERY_STRING} http\: [OR]
RewriteCond %{QUERY_STRING} ftp\: [OR]
RewriteCond %{QUERY_STRING} https\: [OR]
#OR if the URI contains a "["
RewriteCond %{QUERY_STRING} \[ [OR]
#OR if the URI contains a "]"
RewriteCond %{QUERY_STRING} \] [OR]

Greetings,

Joomla157+ (at least) uses [] in its url when editing an article. The code above seems to block this url and consequently, users are unable to edit. Am I missing something here?

Joomla! Discussion Forums

Forum rules

Hacked: External scripts called from my site

Quick reply

Who is online