[英]How i can block requests for a specific page?
I would like to completely delete or block access to a specific page in my site. 我想完全删除或阻止访问我站点中的特定页面。
More specifically, I have seen this exploit " Joomla COM_MEDIA Exploit " : http://all1gat0r.blogspot.gr/2013/08/joomla-commedia-exploit.html 更具体地说,我已经看到了此漏洞利用“ Joomla COM_MEDIA Exploit ”: http : //all1gat0r.blogspot.gr/2013/08/joomla-commedia-exploit.html
and from what I see, there is the page : /index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=
从我所看到的页面中:
/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=
The exploit does not work on me, but anyway I want to completely remove the above page . 该漏洞对我不起作用,但是无论如何我都想完全删除上面的页面 。 How can I do this?
我怎样才能做到这一点?
Web Server : Ubuntu 14.04 LTS ( with installed Mod Security2 ) Web服务器: Ubuntu 14.04 LTS ( 已安装Mod Security2 )
Web Site : Joomla 3.1.5 网站: Joomla 3.1.5
Is there any single parameter plus value which makes this URL dangerous? 是否有任何单个参数加值会使该URL变得危险?
Then you could write a rule using ARGS:parameterName ( https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#ARGS ) to block the request. 然后,您可以使用ARGS:parameterName( https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#ARGS )编写规则以阻止请求。
Ronald 罗纳德
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.