• 17-10-2013, 16:34:24
    #1
    Üyeliği durduruldu
    Arkadaşlar sicriptimi upload ettim ftpye forbidden hatası alıyorum .htacces in ismini değiştirince hata gitti fakat bu bana problem yaratıcak seo açısından

    .htacces dosyam aşağıdaki gibidir yardım bekliyorum lütfen.

    ############################################
    # SERVER WISE SETTINGS
    ############################################
    ## uncomment these lines for CGI mode
    ## make sure to specify the correct cgi php binary file name
    ## it might be /cgi-bin/php-cgi

    # Action php5-cgi /cgi-bin/php5-cgi
    # AddHandler php5-cgi .php

    ############################################
    ## GoDaddy specific options

    # Options -MultiViews

    ## you might also need to add this line to php.ini

    ## cgi.fix_pathinfo = 1
    ## RewriteBase /
    ## AddHandler x-httpd-php5 .php
    ## if it still doesn't work, rename php.ini to php5.ini

    ############################################
    ## this line is specific for 1and1 hosting

    #AddType x-mapp-php5 .php
    #AddHandler x-mapp-php5 .php


    ############################################
    # CUSTOM SEO FRIENDLY URL REWRITING
    ############################################


    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} -s [OR]
    RewriteCond %{REQUEST_FILENAME} -l [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^.*$ - [NC,L]
    RewriteRule ^.*$ index.php [NC,L]

    </IfModule>

    ############################################
    ## default index file

    DirectoryIndex index.php

    ############################################
    ## The code below should help against Local and Remote File Inclusion attacks.


    RewriteCond %{REQUEST_METHOD} GET
    RewriteCond %{QUERY_STRING} (.*)(http|https|ftp):\/\/(.*)
    RewriteCond %{QUERY_STRING} ^.*=(ht|f)tp\://.*$ [NC]
    RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
    RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
    RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
    RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:// [OR]
    RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [OR]
    RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
    RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC]
    RewriteRule .* - [F]
    RewriteRule ^(.*)$ index.php [F,L]

    ############################################
    ## use URL encoding in the http:// part

    RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http%3A%2F%2F [OR]


    ############################################
    ## Adding the following directive should give you an additional layer of security
    ## against this type of attacks using the proc/self/environ method.

    RewriteCond %{QUERY_STRING} proc\/self\/environ [NC,OR]


    ###########################################
    # disable user agent verification to not break multiple image upload

    #php_flag suhosin.session.cryptua off


    ############################################
    # PASS THE DEFAULT CHARACTER SET
    ############################################

    AddDefaultCharset utf-8

    ############################################
    # DISABLE THE SERVER SIGNATURE
    ############################################

    ServerSignature Off

    ############################################
    # SECURE HTACCESS FILE
    ############################################

    <Files .htaccess>
    order allow,deny
    deny from all
    </Files>

    ################################
    # UPDATING TEMPLATES, JAVASCRIPT OR CSS FILE WITHOUT HITTING MOD_SECURITY.
    # THIS SETTING MOSTLY HANDY WHEN YOU ARE MODIFYING TEMPLATES FROM ADMIN AREA.
    ################################

    <IfModule mod_security.c>
    SecFilterEngine Off
    SecFilterScanPOST Off
    </IfModule>

    ################################
    # Disable directory browsing
    ################################

    Options -Indexes
    Options +FollowSymLinks
    RewriteEngine on
    IndexIgnore *

    ################################
    # PROTECT .htaccess and .htpasswd FILES
    ################################

    <FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy all
    </FilesMatch>



    ################################
    # PREVENT FILE VIEWING WITH HTACCESS
    ################################

    <Files ~ "\.(pl|jsp|cgi|py|sh|cgi|exe|dll|lo|shtml|phtml)$" >
    order deny,allow
    deny from all
    </Files>

    ################################
    # PPROTECT CONFIG.* FILES
    ################################

    <FilesMatch "^(.*)\.(inc|txt|dat|shtml|exe|dll|pl|cgi|jsp|asp| aspx|ini|sh|zip)$">
    AddDefaultCharset UTF-8
    Order deny,allow
    Deny from all
    </FilesMatch>


    ############################################
    # DISABLING EXECUTING OF FOLLOWING FILES.
    ############################################

    AddHandler cgi-script .pl .py .jsp .asp .jsp .shtml .sh .cgi .pl .aspx .zip .phtml
    Options -ExecCGI

    ############################################
    ## workaround for HTTP authorization
    ## in CGI environment

    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

    <IfModule mod_expires.c>

    ############################################
    ## Add default Expires header
    ## http://developer.yahoo.com/performan...s.html#expires

    ExpiresDefault "access plus 1 year"

    </IfModule>


    ############################################
    ## If running in cluster environment, uncomment this
    ## http://developer.yahoo.com/performance/rules.html#etags

    #FileETag none
  • 17-10-2013, 16:36:16
    #2
    Üyeliği durduruldu
    htaccess dosyasını tekrar yükleyince yine hata veriyormu
  • 17-10-2013, 17:17:12
    #3
    Üyeliği durduruldu
    kcyg17 adlı üyeden alıntı: mesajı görüntüle
    htaccess dosyasını tekrar yükleyince yine hata veriyormu
    evet hocam yine aynı hata değişmedi yani
  • 17-10-2013, 17:20:22
    #4
    Üyeliği durduruldu
    skype adresimi ekleyin bi bakayım
  • 17-10-2013, 17:35:29
    #5
    Üyeliği durduruldu
    kcyg17 adlı üyeden alıntı: mesajı görüntüle
    skype adresimi ekleyin bi bakayım
    Ekledim hocam fakat sorunum sadece htacces ile isim değiştirince normale dönüyor sunucusahibimde aynı seyi söyledi htaccesde basit düzenleme dedi ama kendileri karışamiyor malesef prensip gereği büyük firmaymış sorumluluk vs diyolar
  • 17-10-2013, 21:42:33
    #6
    Üyeliği durduruldu
    arkadaşlar acil lazım bilen yokmu