5/6G Firewall preventing search terms
-
My website’s search puts a string like
sitename.com/?s=”Larry+Correia”
I was getting 403 forbidden warnings on the above term, and tracked it down to
RewriteCond %{QUERY_STRING} (\;|’|\”|%22).*(union|select|insert|drop|update|md5|benchmark|or|and|if) [NC,OR]
It was blocked because Correia has “or” in the word. That rule that gets added to the .htaccess file. I can fix it by putting a \b at the start and end so it has to exact match, but if the plugin updates will this be lost? Is this something that could be added permanently in a future update? It seems a little aggressive this way, and I don’t want people getting 403d just from a search.
Working example:
RewriteCond %{QUERY_STRING} (\;|'|\"|%22).*\b(union|select|insert|drop|update|md5|benchmark|or|and|if)\b [NC,OR]
- The topic ‘5/6G Firewall preventing search terms’ is closed to new replies.
