Post

Wechall - Limited Access Too [Not Solved]

Limited Access Too



1
2
3
4
5
6
7
Haha, thank you so much for your feedback from the first challenge.
Especially thanks to a special person 
who sent in a fixed .htaccess to secure my pages.

The protected/protected.php is now secured :)

To prove me wrong, please access protected/protected.php again.


GeSHi`ed Plaintext code for .htaccess

1
2
3
4
5
6
7
8
9
10
11
12
AuthUserFile .htpasswd
AuthGroupFile /dev/null
AuthName "Authorization Required for the Limited Access Too Challenge"
AuthType Basic
<Limit GET POST HEAD PUT DELETE CONNECT OPTIONS PATCH>
require valid-user
</Limit>
# TRACE is not allowed in Limit if TraceEnable is off, so disallow it completely
# to support both TraceEnable being on and off
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule ^ - [F]






Solution



Link
httpd.apache.org/docs/2.2/ko/mod/mod_rewrite.html


RewriteRule
blog.munilive.com/posts/how-to-use-htaccess-rewrite-rule.html
gmate.tistory.com/317






This post is licensed under CC BY 4.0 by the author.