test please delete

[kali]

Think yourself lucky that Cojak's "special" quiz thingie has dropped off the bottom of LR then...

linky?

[NickFitz]

Is it easy to have no extension? I have gone PHP because I had an aweful time getting the .htaccess thing to work to enable PHP in HTML pages.

I like the look of filenames in URIs with no extensions - me want!

Here's a live example from testpleasedelete.com:

RewriteRule ^(.*[^\/])\.(.+)$ stuff/user.php?name=$1&type=$2 [QSA,L]
RewriteRule ^(.*[^\/])/?$     stuff/user.php?name=$1&type=html [QSA,L]

The first line looks for a user name with an extension (the "\.(.+)$" bit); the user name is passed to user.php in the query string as the argument "name" and the extension as argument "type".

If there's no extension than the first rule won't match and the second rule is applied which simply passes the whole of the text after the / as "name" and "html" as "type".

So the first rule would match:

http://testpleasedelete.com/Jog%20On.html
http://testpleasedelete.com/Jog%20On.xml
http://testpleasedelete.com/Jog%20On.json

(this is just by way of explanation - at the moment all of those will actually give you HTML)

but it wouldn't match

http://testpleasedelete.com/Jog%20On

which would instead be picked up by the second rule and sent to the same place, asking for HTML.

The JSON example would therefore be treated by the server as if it had been

http://testpleasedelete.com/stuff/user.php?name=Jog%20On&type=json

while the extensionless one would be treated as

http://testpleasedelete.com/stuff/user.php?name=Jog%20On&type=html

The added twist is that "/stuff" (which isn't its real name) is configured on the server to be inaccessible from the outside, meaning that making any of those requests directly would fail. As the mapping from external URL to internal URL occurs within the server, the security restriction on the directory doesn't apply.

The benefits of this are primarily:

1. Punters don't have information about the expected arguments and PHP filenames, making it harder for them to poke at the site with random nasty values in the hope of cracking it;

2. A problem with the server which accidentally allowed the source of the PHP files to be viewed would be less likely to lead to a security breach, as the additional directory-level security prevents the PHP files being either viewed or executed directly from outside anyway.

[BrilloPad]

Yes indeed... it doesn't happen often, honestly...

#108700
zeitghost
More fingers than teeth


century

[zeitghost]

linky?

Long gone.

It infected my machine with nasties...

[Bear]

Mmmmmmmmmmmmmmmmmmmmmmmmmmmm...

Stockings.

Mmmmmmmmmmmmmmmmmmmmmmmmmmmmm....

Suspenders....


Mmmmmmmmmmmmmmmmmmmmmmmmmmmmmm....

See - told you they were a good invention. But you're right Zeity suspenders are good too.

But which are best, stockings or suspenders? Or does it have to be both?

[zeitghost]

#108700
zeitghost
More fingers than teeth


century

Eye thank ewe...

Byeeeeeeeeeeeeeeeeee

[kali]

See - told you they were a good invention. But you're right Zeity suspenders are good too.

But which are best, stockings or suspenders? Or does it have to be both?

Hold ups every time, quick and easy. Can't be doing with suspenders!

[NickFitz]

Eye thank ewe...

Byeeeeeeeeeeeeeeeeee

Bye Zeity

[kali]

Eye thank ewe...

Byeeeeeeeeeeeeeeeeee

Byeee big green lizard type thing

[Bear]

Hold ups every time, quick and easy. Can't be doing with suspenders!

I know - very practical!

But can I please dream that actually all those city girls enjoy wearing suspenders!