Hello,
I want to add a new rewrite rule to my htaccess file and think I can combine it with a rule that is there now. Here are the two rules:
#
# Ban attempted cpath=<URL> OS Commerce exploit
RewriteCond %{QUERY_STRING} cPath=https?:// [NC]
RewriteRule ^ - [F]
#
RewriteCond %{REQUEST_URI} \.php/login\.php [OR]
RewriteCond %{QUERY_STRING} \.php/login\.php
RewriteRule .* - [F]
#
Can I combine these to this:
#
# Ban attempted hack attempts in OS Commerce
RewriteCond %{REQUEST_URI} \.php/login\.php [NC,OR]
RewriteCond %{QUERY_STRING} \.php/login\.php [NC,OR]
RewriteCond %{QUERY_STRING} cPath=https?:// [NC]
RewriteRule ^ - [F]
#
These combinations of terms to do not occur except in a hack attempt. Is this worded correctly?
Thank you.
Grandma_genie