im using 3 lines of rewriterules and conds to prevent include-attacks by external urls.
These 3 lines are as follows:
- Code: Select all
RewriteCond %{QUERY_STRING} http[:%] [NC]
RewriteRule .* /---------http--------- [F,NC]
RewriteRule http: -------http-------- [F,NC]
These 3 lines result in total deny of all URLs having URLs in parameters.
But i need to allow that kinda URLs for some domains.
So one example would be to allow all kinda URL-includes for the domain "my-domain.com", but all the others should be denied.
How can i modify those 3 lines above to do this?
I just want to add those domains to these 3 lines to allow them, the rest should be denied.