line inserted in .htaccess by joomla update? or...?

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
User avatar
reggaebkk
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 176
Joined: Mon Jul 14, 2008 1:39 pm

line inserted in .htaccess by joomla update? or...?

Post by reggaebkk » Mon Oct 13, 2014 6:49 pm

Hi,

I am having problems with dns resolution on several Joomla websites and I am not sure if the websites were hacked or from the ISP's DNS servers, still inquiring (here is Cambodia, ISPs are not 100%).

But many of my websites have had this line inserted in .htaccess:
# requested URL ends with one of the listed extensions
RewriteCond %{REQUEST_URI} /component/|(/[^.]*|\.(php|html?|feed|pdf|vcf|raw))$ [NC]

Host support says that it's a normal server command but I don't see it in Joomla's htaccess.txt...
Can that have been added while doing Joomla updates?

Or does that smell like my websites have been hacked? I have started inspecting folders but so far all seems normal.

If it's part of a hack, can somebody tell me what kind of hack I should be looking for?

Thanks if you have time to help.

User avatar
cmshelplive
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 171
Joined: Thu Dec 09, 2010 9:52 am
Location: United States
Contact:

Re: line inserted in .htaccess by joomla update? or...?

Post by cmshelplive » Tue Oct 14, 2014 11:05 am

RewriteCond is like having a conditional structure where the condition's occurrence causes the rule to be triggered. So question here- what is the follow up RewriteRule, if any.

From the general problem description, it looks like more of a problem related to relative path configuration rather than security issue.
CMSHelpLive Joomla Support
https://cmshelplive.com

User avatar
ionut
Joomla! Ace
Joomla! Ace
Posts: 1264
Joined: Thu May 27, 2010 1:00 pm
Location: EU

Re: line inserted in .htaccess by joomla update? or...?

Post by ionut » Tue Oct 14, 2014 11:23 am


User avatar
reggaebkk
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 176
Joined: Mon Jul 14, 2008 1:39 pm

Re: line inserted in .htaccess by joomla update? or...?

Post by reggaebkk » Tue Oct 14, 2014 11:47 am

nice one, thanks.

User avatar
cmshelplive
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 171
Joined: Thu Dec 09, 2010 9:52 am
Location: United States
Contact:

Re: line inserted in .htaccess by joomla update? or...?

Post by cmshelplive » Mon Oct 27, 2014 10:56 am

Great, enjoy Joomla!
CMSHelpLive Joomla Support
https://cmshelplive.com


Locked

Return to “Security in Joomla! 3.x”