{"id":87,"date":"2016-11-20T23:38:26","date_gmt":"2016-11-20T23:38:26","guid":{"rendered":"https:\/\/galaxydata.ru\/community\/?p=87"},"modified":"2025-07-23T00:30:35","modified_gmt":"2025-07-22T21:30:35","slug":"zashhita-sayta-ot-vzloma-htaccess-dlya-sayta","status":"publish","type":"post","link":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87","title":{"rendered":"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430"},"content":{"rendered":"<p>\u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 CMS:<br \/>\n\u0414\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0432 \u0444\u0430\u0439\u043b .htaccess<\/p>\n<pre class=\"lang:sh decode:true \">########## Begin - RewriteEngine enabled\r\nRewriteEngine On\r\n########## End - RewriteEngine enabled\r\n\r\n########## Begin - RewriteBase\r\n# Uncomment following line if your webserver's URL\r\n# is not directly related to physical file paths.\r\n# Update Your Joomla! Directory (just \/ for root)\r\n#RewriteBase \/\r\n########## End - RewriteBase\r\n\r\n########## Begin - No directory listings\r\nIndexIgnore *\r\n########## End - No directory listings\r\n\r\n########## Begin - File execution order, by Komra.de\r\nDirectoryIndex index.php index.html\r\n########## End - File execution order\r\n\r\n########## Begin - ETag Optimization\r\n## This rule will create an ETag for files based only on the modification\r\n## timestamp and their size. This works wonders if you are using rsync'ed\r\n## servers, where the inode number of identical files differs.\r\n## Note: It may cause problems on your server and you may need to remove it\r\nFileETag MTime Size\r\n########## End - ETag Optimization\r\n\r\n########## Begin - Common hacking tools and bandwidth hoggers block\r\n## By SigSiu.net and @nikosdion.\r\n# This line also disables Akeeba Remote Control 2.5 and earlier\r\nSetEnvIf user-agent \"Indy Library\" stayout=1\r\n# WARNING: Disabling wget will also block the most common method for\r\n# running CRON jobs. Remove if you have issues with CRON jobs.\r\nSetEnvIf user-agent \"Wget\" stayout=1\r\n# The following rules are for bandwidth-hogging download tools\r\nSetEnvIf user-agent \"libwww-perl\" stayout=1\r\nSetEnvIf user-agent \"Download Demon\" stayout=1\r\nSetEnvIf user-agent \"GetRight\" stayout=1\r\nSetEnvIf user-agent \"GetWeb!\" stayout=1\r\nSetEnvIf user-agent \"Go!Zilla\" stayout=1\r\nSetEnvIf user-agent \"Go-Ahead-Got-It\" stayout=1\r\nSetEnvIf user-agent \"GrabNet\" stayout=1\r\nSetEnvIf user-agent \"TurnitinBot\" stayout=1\r\n# This line denies access to all of the above tools\r\ndeny from env=stayout\r\n########## End - Common hacking tools and bandwidth hoggers block\r\n\r\n########## Begin - Automatic compression of resources\r\n# Compress text, html, javascript, css, xml, kudos to Komra.de\r\n# May kill access to your site for old versions of Internet Explorer\r\n# The server needs to be compiled with mod_deflate otherwise it will send HTTP 500 Error.\r\n# mod_deflate is not available on Apache 1.x series. Can only be used with Apache 2.x server.\r\n# AddOutputFilterByType is now deprecated by Apache. Use mod_filter in the future.\r\nAddOutputFilterByType DEFLATE text\/plain text\/html text\/xml text\/css application\/xml application\/xhtml+xml application\/rss+xml application\/javascript application\/x-javascript\r\n########## End - Automatic compression of resources\r\n\r\n########## Begin - Rewrite rules to block out some common exploits\r\n## If you experience problems on your site block out the operations listed below\r\n## This attempts to block the most common type of exploit `attempts` to Joomla!\r\n#\r\n# If the request query string contains \/proc\/self\/environ (by SigSiu.net)\r\nRewriteCond %{QUERY_STRING} proc\/self\/environ [OR]\r\n# Block out any script trying to set a mosConfig value through the URL\r\n# (these attacks wouldn't work w\/out Joomla! 1.5's Legacy Mode plugin)\r\nRewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\\%3D) [OR]\r\n# Block out any script trying to base64_encode or base64_decode data within the URL\r\nRewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\\([^)]*\\) [OR]\r\n## IMPORTANT: If the above line throws an HTTP 500 error, replace it with these 2 lines:\r\n# RewriteCond %{QUERY_STRING} base64_encode\\(.*\\) [OR]\r\n# RewriteCond %{QUERY_STRING} base64_decode\\(.*\\) [OR]\r\n# Block out any script that includes a &lt;script&gt; tag in URL\r\nRewriteCond %{QUERY_STRING} (&lt;|%3C)([^s]*s)+cript.*(&gt;|%3E) [NC,OR]\r\n# Block out any script trying to set a PHP GLOBALS variable via URL\r\nRewriteCond %{QUERY_STRING} GLOBALS(=|\\[|\\%[0-9A-Z]{0,2}) [OR]\r\n# Block out any script trying to modify a _REQUEST variable via URL\r\nRewriteCond %{QUERY_STRING} _REQUEST(=|\\[|\\%[0-9A-Z]{0,2})\r\n# Return 403 Forbidden header and show the content of the root homepage\r\nRewriteRule .* index.php [F]\r\n#\r\n########## End - Rewrite rules to block out some common exploits\r\n\r\n########## Begin - Advanced server protection rules exceptions ####\r\n##\r\n## These are sample exceptions to the Advanced Server Protection 3.1\r\n## rule set further down this file.\r\n##\r\n## Allow UddeIM CAPTCHA\r\nRewriteRule ^components\/com_uddeim\/captcha15\\.php$ - [L]\r\n## Allow Phil Taylor's Turbo Gears\r\nRewriteRule ^plugins\/system\/GoogleGears\/gears-manifest\\.php$ - [L]\r\n## Allow JoomlaWorks AllVideos\r\nRewriteRule ^plugins\/content\/jw_allvideos\/includes\/jw_allvideos_scripts\\.php$ - [L]\r\n## Allow Admin Tools Joomla! updater to run\r\nRewriteRule ^administrator\/components\/com_admintools\/restore\\.php$ - [L]\r\n## Allow Akeeba Backup Professional's integrated restoration script to run\r\nRewriteRule ^administrator\/components\/com_akeeba\/restore\\.php$ - [L]\r\n## Allow Akeeba Kickstart\r\nRewriteRule ^kickstart\\.php$ - [L]\r\n\r\n# Add more rules to single PHP files here\r\n\r\n## Allow Agora attachments, but not PHP files in that directory!\r\nRewriteCond %{REQUEST_FILENAME} !(\\.php)$\r\nRewriteCond %{REQUEST_FILENAME} -f\r\nRewriteRule ^components\/com_agora\/img\/members\/ - [L]\r\n\r\n########## End - Advanced server protection rules exceptions ####\r\n\r\n########## Begin - File injection protection, by SigSiu.net\r\nRewriteCond %{REQUEST_METHOD} GET\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:\/\/ [OR]\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\\.\\.\/\/?)+ [OR]\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=\/([a-z0-9_.]\/\/?)+ [NC]\r\nRewriteRule .* - [F]\r\n########## End - File injection protection\r\n\r\n########## Begin - Basic antispam Filter, by SigSiu.net\r\n## I removed some common words, tweak to your liking\r\n## This code uses PCRE and works only with Apache 2.x.\r\n## This code will NOT work with Apache 1.x servers.\r\nRewriteCond %{QUERY_STRING} \\b(ambien|blue\\spill|cialis|cocaine|ejaculation|erectile)\\b [NC,OR]\r\nRewriteCond %{QUERY_STRING} \\b(erections|hoodia|huronriveracres|impotence|levitra|libido)\\b [NC,OR]\r\nRewriteCond %{QUERY_STRING} \\b(lipitor|phentermin|pro[sz]ac|sandyauer|tramadol|troyhamby)\\b [NC,OR]\r\nRewriteCond %{QUERY_STRING} \\b(ultram|unicauca|valium|viagra|vicodin|xanax|ypxaieo)\\b [NC]\r\n## Note: The final RewriteCond must NOT use the [OR] flag.\r\nRewriteRule .* - [F]\r\n## Note: The previous lines are a \"compressed\" version\r\n## of the filters. You can add your own filters as:\r\n## RewriteCond %{QUERY_STRING} \\bbadword\\b [NC,OR]\r\n## where \"badword\" is the word you want to exclude.\r\n########## End - Basic antispam Filter, by SigSiu.net\r\n\r\n########## Begin - Advanced server protection - paths and files\r\n\r\n## Back-end protection\r\n## This also blocks fingerprinting attacks browsing for XML and INI files\r\nRewriteRule ^administrator\/?$ - [L]\r\nRewriteRule ^administrator\/index\\.(php|html?)$ - [L]\r\nRewriteRule ^administrator\/index[23]\\.php$ - [L]\r\nRewriteRule ^administrator\/(components|modules|templates|images|plugins)\/([^\/]+\/)*([^\/.]+\\.)+(jp(e?g|2)?|png|gif|bmp|css|js|swf|html?|mp(eg?|[34])|avi|wav|og[gv]|xlsx?|docx?|pptx?|zip|rar|pdf|xps|txt|7z|svg|od[tsp]|flv|mov)$ - [L]\r\nRewriteRule ^administrator\/ - [F]\r\n\r\n## Explicitly allow access only to XML-RPC's xmlrpc\/index.php or plain xmlrpc\/ directory\r\nRewriteRule ^xmlrpc\/(index\\.php)?$ - [L]\r\nRewriteRule ^xmlrpc\/ - [F]\r\n\r\n## Allow limited access for certain Joomla! system directories with client-accessible content\r\nRewriteRule ^(components|modules|plugins|templates)\/([^\/]+\/)*([^\/.]+\\.)+(jp(e?g|2)?|png|gif|bmp|css|js|swf|html?|mp(eg?|[34])|avi|wav|og[gv]|xlsx?|docx?|pptx?|zip|rar|pdf|xps|txt|7z|svg|od[tsp]|flv|mov)$ - [L]\r\n## Uncomment this line if you have extensions which require direct access to their own\r\n## custom index.php files. Note that this is UNSAFE and the developer should be ashamed\r\n## for being so lame, lazy and security unconscious.\r\n# RewriteRule ^(components|modules|plugins|templates)\/([^\/]+\/)*(index\\.php)?$ - [L]\r\n## Uncomment the following line if your template requires direct access to PHP files\r\n## inside its directory, e.g. GZip compressed copies of its CSS files\r\n# RewriteRule ^templates\/([^\/]+\/)*([^\/.]+\\.)+php$ - [L]\r\nRewriteRule ^(components|modules|plugins|templates)\/ - [F]\r\n\r\n## Disallow access to rogue PHP files throughout the site, unless they are explicitly allowed\r\nRewriteCond %{REQUEST_FILENAME} \\.php$\r\nRewriteCond %{REQUEST_FILENAME} !\/index[23]?\\.php$\r\n## The next line is to explicitly allow the forum post assistant(fpa-xx)script to run\r\nRewriteCond %{REQUEST_FILENAME} !\/fpa-[a-z]{2}\\.php\r\nRewriteCond %{REQUEST_FILENAME} -f\r\nRewriteRule ^([^\/]+\/)*([^\/.]+\\.)+php$ - [F]\r\n\r\n########## End - Advanced server protection - paths and files\r\n\r\n########## Begin - Advanced server protection - query strings, referrer and config\r\n# Advanced server protection, version 3.2 - May 2011\r\n# by Nicholas K. Dionysopoulos\r\n\r\n## Disallow PHP Easter Eggs (can be used in fingerprinting attacks to determine\r\n## your PHP version). See http:\/\/www.0php.com\/php_easter_egg.php and\r\n## http:\/\/osvdb.org\/12184 for more information\r\nRewriteCond %{QUERY_STRING} \\=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC]\r\nRewriteRule .* - [F]\r\n\r\n## SQLi first line of defense, thanks to Radek Suski (SigSiu.net) @\r\n## http:\/\/www.sigsiu.net\/presentations\/fortifying_your_joomla_website.html\r\n## May cause problems on legitimate requests\r\nRewriteCond %{QUERY_STRING} concat[^\\(]*\\( [NC,OR]\r\nRewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR]\r\nRewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC]\r\nRewriteRule .* - [F]\r\n\r\n## Disallow visual fingerprinting of Joomla! sites (module position dump)\r\n## Initial idea by Brian Teeman and Ken Crowder, see:\r\n## http:\/\/www.slideshare.net\/brianteeman\/hidden-joomla-secrets\r\n## Improved by @nikosdion to work more efficiently and handle template\r\n## and tmpl query parameters\r\nRewriteCond %{QUERY_STRING} (^|&amp;)tmpl=(component|system) [NC]\r\nRewriteRule .* - [L]\r\nRewriteCond %{QUERY_STRING} (^|&amp;)t(p|emplate|mpl)= [NC]\r\nRewriteRule .* - [F]\r\n\r\n## Disallow access to htaccess.txt, configuration.php, configuration.php-dist and php.ini\r\nRewriteRule ^(htaccess\\.txt|configuration\\.php(-dist)?|php\\.ini)$ - [F]\r\n\r\n########## End - Advanced server protection - query strings, referrer and config\r\n\r\n########## Begin - Joomla! core SEF Section\r\n#\r\nRewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]\r\n#\r\n# If the requested path and file is not \/index.php and the request\r\n# has not already been internally rewritten to the index.php script\r\nRewriteCond %{REQUEST_URI} !^\/index\\.php\r\n# and the request is for the site root, or for an extensionless URL,\r\n# or the requested URL ends with one of the listed extensions\r\nRewriteCond %{REQUEST_URI} \/component\/|(\/[^.]*|\\.(php|html?|feed|pdf|vcf|raw|ini|zip|json|file))$ [NC]\r\n# and the requested path and file doesn't directly match a physical file\r\nRewriteCond %{REQUEST_FILENAME} !-f\r\n# and the requested path doesn't directly match a physical folder\r\nRewriteCond %{REQUEST_FILENAME} !-d\r\n# internally rewrite the request to the index.php script\r\nRewriteRule .* index.php [L]\r\n#\r\n########## End - Joomla! core SEF Section\r\n\r\n########## Begin - Optimal default expiration time\r\n## Note: this might cause problems and you might have to comment it out by\r\n## placing a hash in front of this section's lines\r\n&lt;IfModule mod_expires.c&gt;\r\n# Enable expiration control\r\nExpiresActive On\r\n\r\n# Default expiration: 1 hour after request\r\nExpiresDefault \"now plus 1 hour\"\r\n\r\n# CSS and JS expiration: 1 week after request\r\nExpiresByType text\/css \"now plus 1 week\"\r\nExpiresByType application\/javascript \"now plus 1 week\"\r\nExpiresByType application\/x-javascript \"now plus 1 week\"\r\n\r\n# Image files expiration: 1 month after request\r\nExpiresByType image\/bmp \"now plus 1 month\"\r\nExpiresByType image\/gif \"now plus 1 month\"\r\nExpiresByType image\/jpeg \"now plus 1 month\"\r\nExpiresByType image\/jp2 \"now plus 1 month\"\r\nExpiresByType image\/pipeg \"now plus 1 month\"\r\nExpiresByType image\/png \"now plus 1 month\"\r\nExpiresByType image\/svg+xml \"now plus 1 month\"\r\nExpiresByType image\/tiff \"now plus 1 month\"\r\nExpiresByType image\/vnd.microsoft.icon \"now plus 1 month\"\r\nExpiresByType image\/x-icon \"now plus 1 month\"\r\nExpiresByType image\/ico \"now plus 1 month\"\r\nExpiresByType image\/icon \"now plus 1 month\"\r\nExpiresByType text\/ico \"now plus 1 month\"\r\nExpiresByType application\/ico \"now plus 1 month\"\r\nExpiresByType image\/vnd.wap.wbmp \"now plus 1 month\"\r\nExpiresByType application\/vnd.wap.wbxml \"now plus 1 month\"\r\nExpiresByType application\/smil \"now plus 1 month\"\r\n\r\n# Audio files expiration: 1 month after request\r\nExpiresByType audio\/basic \"now plus 1 month\"\r\nExpiresByType audio\/mid \"now plus 1 month\"\r\nExpiresByType audio\/midi \"now plus 1 month\"\r\nExpiresByType audio\/mpeg \"now plus 1 month\"\r\nExpiresByType audio\/x-aiff \"now plus 1 month\"\r\nExpiresByType audio\/x-mpegurl \"now plus 1 month\"\r\nExpiresByType audio\/x-pn-realaudio \"now plus 1 month\"\r\nExpiresByType audio\/x-wav \"now plus 1 month\"\r\n\r\n# Movie files expiration: 1 month after request\r\nExpiresByType application\/x-shockwave-flash \"now plus 1 month\"\r\nExpiresByType x-world\/x-vrml \"now plus 1 month\"\r\nExpiresByType video\/x-msvideo \"now plus 1 month\"\r\nExpiresByType video\/mpeg \"now plus 1 month\"\r\nExpiresByType video\/mp4 \"now plus 1 month\"\r\nExpiresByType video\/quicktime \"now plus 1 month\"\r\nExpiresByType video\/x-la-asf \"now plus 1 month\"\r\nExpiresByType video\/x-ms-asf \"now plus 1 month\"\r\n&lt;\/IfModule&gt;\r\n########## End - Optimal expiration time\r\n\r\n########## Block bad user agents\r\n## The following list may include bots that no longer exist or are not a problem for your site.\r\nRewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Bot\\ mailto:craftbot@yahoo.com [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Custo [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^DISCo [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Download\\ Demon [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^eCatch [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Express\\ WebPictures [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^GetRight [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Grafula [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^HMView [OR]\r\nRewriteCond %{HTTP_USER_AGENT} HTTrack [NC,OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Image\\ Stripper [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Image\\ Sucker [OR]\r\nRewriteCond %{HTTP_USER_AGENT} Indy\\ Library [NC,OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^InterGET [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Internet\\ Ninja [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^JetCar [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^JOC\\ Web\\ Spider [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^larbin [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Mass\\ Downloader [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^MIDown\\ tool [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Mister\\ PiX [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Navroad [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^NearSite [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Net\\ Vampire [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Octopus [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Offline\\ Explorer [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Offline\\ Navigator [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Papa\\ Foto [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^pavuk [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^ReGet [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Teleport\\ Pro [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Web\\ Image\\ Collector [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Web\\ Sucker [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebGo\\ IS [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Website\\ eXtractor [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Website\\ Quester [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebWhacker [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Widow [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Xaldon\\ WebSpider [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^Zeus\r\n## Note: The final RewriteCond must NOT use the [OR] flag.\r\n## Return 403 Forbidden error.\r\nRewriteRule .* - [F]<\/pre>\n<p>&nbsp;<\/p>\n<h3 id=\"\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435,_\u043d\u0438\u0436\u0435_\u043d\u0435_\u0440\u0430\u0431\u043e\u0447\u0438\u0439_\u043a\u043e\u043d\u0444\u0438\u0433,_\u043d\u0435_\u043d\u0430_\u0432\u0441\u0435\u0445_Joomla_\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442.\" >Section 1. <span style=\"color: #ff0000;\">\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u043d\u0438\u0436\u0435 \u043d\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0433, \u043d\u0435 \u043d\u0430 \u0432\u0441\u0435\u0445 Joomla \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442.<\/span><\/h3>\n<pre class=\"lang:default decode:true\">######################################## START PROTECT ################################################## #\r\n# Enable mod rewrite\r\nRewriteEngine On\r\n\r\n\r\n########## Begin - No directory listings\r\nIndexIgnore *\r\nOptions -Indexes\r\n\r\n########## Begin - File execution order, by Komra.de\r\nDirectoryIndex index.php index.html\r\n\r\n########## Begin - Common hacking tools and bandwidth hoggers block\r\nSetEnvIf user-agent \"Indy Library\" stayout=1\r\n#SetEnvIf user-agent \"Wget\" stayout=1\r\nSetEnvIf user-agent \"libwww-perl\" stayout=1\r\nSetEnvIf user-agent \"Download Demon\" stayout=1\r\nSetEnvIf user-agent \"GetRight\" stayout=1\r\nSetEnvIf user-agent \"GetWeb!\" stayout=1\r\nSetEnvIf user-agent \"Go!Zilla\" stayout=1\r\nSetEnvIf user-agent \"Go-Ahead-Got-It\" stayout=1\r\nSetEnvIf user-agent \"GrabNet\" stayout=1\r\nSetEnvIf user-agent \"TurnitinBot\" stayout=1\r\n\r\ndeny from env=stayout\r\n\r\n########## Begin - Rewrite rules to block out some common exploits\r\n# If the request query string contains \/proc\/self\/environ (by SigSiu.net)\r\nRewriteCond %{QUERY_STRING} proc\/self\/environ [OR]\r\n# Block out any script trying to base64_encode or base64_decode data within the URL\r\nRewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\\([^)]*\\) [OR]\r\n## IMPORTANT: If the above line throws an HTTP 500 error, replace it with these 2 lines:\r\n# RewriteCond %{QUERY_STRING} base64_encode\\(.*\\) [OR]\r\n# RewriteCond %{QUERY_STRING} base64_decode\\(.*\\) [OR]\r\n\r\n# Block out any script that includes a &lt;script&gt; tag in URL\r\nRewriteCond %{QUERY_STRING} (&lt;|%3C)([^s]*s)+cript.*(&gt;|%3E) [NC,OR]\r\n# Block out any script trying to set a PHP GLOBALS variable via URL\r\nRewriteCond %{QUERY_STRING} GLOBALS(=|\\[|\\%[0-9A-Z]{0,2}) [OR]\r\n# Block out any script trying to modify a _REQUEST variable via URL\r\nRewriteCond %{QUERY_STRING} _REQUEST(=|\\[|\\%[0-9A-Z]{0,2})\r\n# Return 403 Forbidden header and show the content of the root homepage\r\nRewriteRule .* index.php [F]\r\n#\r\n########## End - Rewrite rules to block out some common exploits\r\n\r\n########## Begin - File injection protection, by SigSiu.net\r\nRewriteCond %{REQUEST_METHOD} GET\r\n# to put some exceptions\r\n#RewriteCond %{QUERY_STRING} ![a-zA-Z0-9_]=http:\/\/yoursite\\.ru\/\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:\/\/ [OR]\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=https:\/\/ [OR]\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=ftp:\/\/ [OR]\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\\.\\.\/\/?)+ [OR]\r\nRewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=\/([a-z0-9_.]\/\/?)+ [NC]\r\n# CustomLog insert-path-and-name-of-log common env=bad-range\r\nRewriteRule .* - [F]\r\n\r\n########## Begin - Basic antispam Filter, by SigSiu.net\r\n## This code will NOT work with Apache 1.x servers.\r\n\r\n# RewriteCond %{QUERY_STRING} \\b(ambien|blue\\spill|cialis|cocaine|ejaculation|er ectile)\\b [NC,OR]\r\n# RewriteCond %{QUERY_STRING} \\b(erections|hoodia|huronriveracres|impotence|levi tra|libido)\\b [NC,OR]\r\n# RewriteCond %{QUERY_STRING} \\b(lipitor|phentermin|pro[sz]ac|sandyauer|tramadol|troyhamby)\\b [NC,OR]\r\n# RewriteCond %{QUERY_STRING} \\b(ultram|unicauca|valium|viagra|vicodin|xanax|ypx aieo)\\b [NC]\r\n\r\n# RewriteRule .* - [F]\r\n\r\n########## Begin - Advanced server protection - query strings, referrer and config\r\n## Disallow PHP Easter Eggs (can be used in fingerprinting attacks to determine\r\n## your PHP version). See http:\/\/www.0php.com\/php_easter_egg.php and\r\n## http:\/\/osvdb.org\/12184 for more information\r\nRewriteCond %{QUERY_STRING} \\=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC]\r\nRewriteCond %{QUERY_STRING} ^(%2d|-)[^=]+$ [NC]\r\nRewriteCond %{QUERY_STRING} ^(%2d|\\-)[^=]+$ [NC]\r\nRewriteRule .* - [F]\r\n\r\n## SQLi first line of defense, thanks to Radek Suski (SigSiu.net) @\r\n## http:\/\/www.sigsiu.net\/presentations\/...a_website.html\r\n## May cause problems on legitimate requests\r\nRewriteCond %{QUERY_STRING} concat[^\\(]*\\( [NC,OR]\r\nRewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR]\r\nRewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC]\r\n# CustomLog insert-path-and-name-of-log common env=bad-range\r\nRewriteRule .* - [F]\r\n\r\n#### More\r\nRewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK) [NC,OR]\r\nRewriteCond %{THE_REQUEST} (\\\\r|\\\\n|%0A|%0D) [NC,OR]\r\n\r\n#RewriteCond %{HTTP_REFERER} (&lt;|&gt;|-|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]\r\n#RewriteCond %{HTTP_COOKIE} (&lt;|&gt;|-|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]\r\n#RewriteCond %{HTTP_USER_AGENT} (&lt;|&gt;|-|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]\r\n\r\n\r\nRewriteCond %{HTTP_REFERER} ^(.*)(&lt;|&gt;|\u2019|%0A|%0D|%27|%3C|%3E|%00).* [NC,OR]\r\nRewriteCond %{HTTP_COOKIE} ^.*(&lt;|&gt;|\u2019|%0A|%0D|%27|%3C|%3E|%00).* [NC,OR]\r\nRewriteCond %{REQUEST_URI} ^\/(,|;|:|&lt;|&gt;|\u201d&gt;|\u201d&lt;|\/|\\\\\\.\\.\\\\).{0,9999}.* [NC,OR]\r\n\r\nRewriteCond %{HTTP_USER_AGENT} ^$ [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^(java|curl|wget) [NC,OR]\r\nRewriteCond %{HTTP_USER_AGENT} (winhttp|HTTrack|clshttp|archiver|loader|email|har vest|extract|grab|miner) [NC,OR]\r\nRewriteCond %{HTTP_USER_AGENT} (libwww-perl|curl|wget|python|nikto|scan) [NC,OR]\r\n\r\n\r\nRewriteCond %{QUERY_STRING} proc\\\/self\\\/environ [NC,OR]\r\nRewriteCond %{QUERY_STRING} etc\\\/passwd [NC,OR]\r\n\r\n#Block mySQL injects\r\nRewriteCond %{QUERY_STRING} (;|&lt;|&gt;|-|\u00a6|\\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(\/\\*|information_schema|union|delete|select|insert|c ast|set|concat_ws|file_priv|load_file|aes_decrypt| unhex|aes_encrypt|declare|drop|update|md5|benchmar k) [NC,OR]\r\nRewriteCond %{QUERY_STRING} \\.\\.\/\\.\\. [OR]\r\nRewriteCond %{QUERY_STRING} (localhost|loopback|127\\.0\\.0\\.1) [NC,OR]\r\nRewriteCond %{QUERY_STRING} (&lt;|&gt;|-|%0A|%0D|%27|%3C|%3E|%00) [NC]\r\n# CustomLog insert-path-and-name-of-log common env=bad-range\r\nRewriteRule .* - [F]\r\n\r\n# drop Range header when more than 5 ranges.\r\n#SetEnvIf Range (,.*?){5,} bad-range=1\r\n#RequestHeader unset Range env=bad-range\r\n# CustomLog insert-path-and-name-of-log common env=bad-range\r\n\r\n# XSS Protection\r\n#Header set X-Frame-Options DENY\r\n#Header set X-XSS-Protection \"1; mode=block\"\r\n#Header set X-Content-Security-Policy \"allow 'self';\"\r\n#Header set X-Content-Type-Options \"nosniff\"\r\n\r\n# multiple file types\r\n&lt;FilesMatch \"\\.(htaccess|htpasswd|ini|phps|fla|psd|log|sh|sql) $\"&gt;\r\nOrder Allow,Deny\r\nDeny from all\r\n&lt;\/FilesMatch&gt;\r\n########################## END ######################################<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 CMS: \u0414\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0432 \u0444\u0430\u0439\u043b .htaccess ########## Begin &#8212; RewriteEngine enabled RewriteEngine On ########## End &#8212; RewriteEngine enabled ########## Begin &#8212; RewriteBase # Uncomment following line&hellip; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-87","post","type-post","status-publish","format-standard","hentry","category-frameworks"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.4 (Yoast SEO v25.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430 - GalaxyData Community<\/title>\n<meta name=\"description\" content=\"\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0443\u0441\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a XSS\/DDoS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Apache-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\" \/>\n<meta property=\"og:locale\" content=\"ru_RU\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430\" \/>\n<meta property=\"og:description\" content=\"\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0443\u0441\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a XSS\/DDoS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Apache-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\" \/>\n<meta property=\"og:site_name\" content=\"GalaxyData Community\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/vk.com\/galaxydata\" \/>\n<meta property=\"article:published_time\" content=\"2016-11-20T23:38:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-22T21:30:35+00:00\" \/>\n<meta name=\"author\" content=\"Eduard Yamaltdinov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u043e\u043c\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eduard Yamaltdinov\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u043c\u0438\u043d\u0443\u0442\u0430\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#article\",\"isPartOf\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\"},\"author\":{\"name\":\"Eduard Yamaltdinov\",\"@id\":\"https:\/\/galaxydata.ru\/community\/#\/schema\/person\/674f493b626af18d90fe784aa69dfd7b\"},\"headline\":\"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430\",\"datePublished\":\"2016-11-20T23:38:26+00:00\",\"dateModified\":\"2025-07-22T21:30:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\"},\"wordCount\":29,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/#organization\"},\"articleSection\":[\"Frameworks\"],\"inLanguage\":\"ru-RU\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\",\"url\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\",\"name\":\"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430 - GalaxyData Community\",\"isPartOf\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/#website\"},\"datePublished\":\"2016-11-20T23:38:26+00:00\",\"dateModified\":\"2025-07-22T21:30:35+00:00\",\"description\":\"\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0443\u0441\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a XSS\/DDoS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Apache-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\",\"breadcrumb\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#breadcrumb\"},\"inLanguage\":\"ru-RU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/galaxydata.ru\/community\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/galaxydata.ru\/community\/#website\",\"url\":\"https:\/\/galaxydata.ru\/community\/\",\"name\":\"GalaxyData Community\",\"description\":\"Tutorial for Cloud VDS\",\"publisher\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/galaxydata.ru\/community\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ru-RU\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/galaxydata.ru\/community\/#organization\",\"name\":\"GalaxyData Community\",\"url\":\"https:\/\/galaxydata.ru\/community\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ru-RU\",\"@id\":\"https:\/\/galaxydata.ru\/community\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2025\/07\/favicon_from_logo_32x32_gd.png\",\"contentUrl\":\"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2025\/07\/favicon_from_logo_32x32_gd.png\",\"width\":32,\"height\":32,\"caption\":\"GalaxyData Community\"},\"image\":{\"@id\":\"https:\/\/galaxydata.ru\/community\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/vk.com\/galaxydata\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/galaxydata.ru\/community\/#\/schema\/person\/674f493b626af18d90fe784aa69dfd7b\",\"name\":\"Eduard Yamaltdinov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ru-RU\",\"@id\":\"https:\/\/galaxydata.ru\/community\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2016\/10\/cloud-server-150x150.png\",\"contentUrl\":\"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2016\/10\/cloud-server-150x150.png\",\"caption\":\"Eduard Yamaltdinov\"},\"description\":\"Eduard Yamaltdinov \u2014 \u0430\u0432\u0442\u043e\u0440 \u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0415\u0441\u043b\u0438 \u0432\u0430\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0443\u0437\u043d\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0445, \u043e\u043f\u044b\u0442\u0435 \u0438\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435, \u043a\u0430\u043a\u0443\u044e \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c.\",\"url\":\"https:\/\/galaxydata.ru\/community\/author\/galaxydata\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430 - GalaxyData Community","description":"\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0443\u0441\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a XSS\/DDoS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Apache-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87","og_locale":"ru_RU","og_type":"article","og_title":"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430","og_description":"\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0443\u0441\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a XSS\/DDoS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Apache-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.","og_url":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87","og_site_name":"GalaxyData Community","article_publisher":"https:\/\/vk.com\/galaxydata","article_published_time":"2016-11-20T23:38:26+00:00","article_modified_time":"2025-07-22T21:30:35+00:00","author":"Eduard Yamaltdinov","twitter_card":"summary_large_image","twitter_misc":{"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u043e\u043c":"Eduard Yamaltdinov","\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f":"1 \u043c\u0438\u043d\u0443\u0442\u0430"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#article","isPartOf":{"@id":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87"},"author":{"name":"Eduard Yamaltdinov","@id":"https:\/\/galaxydata.ru\/community\/#\/schema\/person\/674f493b626af18d90fe784aa69dfd7b"},"headline":"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430","datePublished":"2016-11-20T23:38:26+00:00","dateModified":"2025-07-22T21:30:35+00:00","mainEntityOfPage":{"@id":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87"},"wordCount":29,"commentCount":0,"publisher":{"@id":"https:\/\/galaxydata.ru\/community\/#organization"},"articleSection":["Frameworks"],"inLanguage":"ru-RU","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#respond"]}]},{"@type":"WebPage","@id":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87","url":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87","name":"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430 - GalaxyData Community","isPartOf":{"@id":"https:\/\/galaxydata.ru\/community\/#website"},"datePublished":"2016-11-20T23:38:26+00:00","dateModified":"2025-07-22T21:30:35+00:00","description":"\u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0443\u0441\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a XSS\/DDoS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c Apache-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.","breadcrumb":{"@id":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#breadcrumb"},"inLanguage":"ru-RU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/galaxydata.ru\/community\/zashhita-sayta-ot-vzloma-htaccess-dlya-sayta-87#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/galaxydata.ru\/community"},{"@type":"ListItem","position":2,"name":"\u0417\u0430\u0449\u0438\u0442\u0430 \u0441\u0430\u0439\u0442\u0430 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 .htaccess \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u0430"}]},{"@type":"WebSite","@id":"https:\/\/galaxydata.ru\/community\/#website","url":"https:\/\/galaxydata.ru\/community\/","name":"GalaxyData Community","description":"Tutorial for Cloud VDS","publisher":{"@id":"https:\/\/galaxydata.ru\/community\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/galaxydata.ru\/community\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ru-RU"},{"@type":"Organization","@id":"https:\/\/galaxydata.ru\/community\/#organization","name":"GalaxyData Community","url":"https:\/\/galaxydata.ru\/community\/","logo":{"@type":"ImageObject","inLanguage":"ru-RU","@id":"https:\/\/galaxydata.ru\/community\/#\/schema\/logo\/image\/","url":"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2025\/07\/favicon_from_logo_32x32_gd.png","contentUrl":"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2025\/07\/favicon_from_logo_32x32_gd.png","width":32,"height":32,"caption":"GalaxyData Community"},"image":{"@id":"https:\/\/galaxydata.ru\/community\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/vk.com\/galaxydata"]},{"@type":"Person","@id":"https:\/\/galaxydata.ru\/community\/#\/schema\/person\/674f493b626af18d90fe784aa69dfd7b","name":"Eduard Yamaltdinov","image":{"@type":"ImageObject","inLanguage":"ru-RU","@id":"https:\/\/galaxydata.ru\/community\/#\/schema\/person\/image\/","url":"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2016\/10\/cloud-server-150x150.png","contentUrl":"https:\/\/galaxydata.ru\/community\/wp-content\/uploads\/2016\/10\/cloud-server-150x150.png","caption":"Eduard Yamaltdinov"},"description":"Eduard Yamaltdinov \u2014 \u0430\u0432\u0442\u043e\u0440 \u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0415\u0441\u043b\u0438 \u0432\u0430\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0443\u0437\u043d\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0445, \u043e\u043f\u044b\u0442\u0435 \u0438\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435, \u043a\u0430\u043a\u0443\u044e \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c.","url":"https:\/\/galaxydata.ru\/community\/author\/galaxydata"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/posts\/87","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/comments?post=87"}],"version-history":[{"count":1,"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/posts\/87\/revisions"}],"predecessor-version":[{"id":2044,"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/posts\/87\/revisions\/2044"}],"wp:attachment":[{"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/media?parent=87"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/categories?post=87"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/galaxydata.ru\/community\/wp-json\/wp\/v2\/tags?post=87"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}