Loading...
 
Features / Usability

Features / Usability


Re: error notification on anonymous access attempt

posts: 214

Hi,

In your earlier post you gave an example for the gallery accesses that you are seeing:

Copy to clipboard
http://omahacopwatch.progressiveresearchinstitute.org/tiki-galleries.php?&sort_mode=lastModif_desc&edit_mode=1&galleryId=201&offset=0


You also mentioned that you removed that gallery. From your example, "galleryId=201", refers to the removed gallery. You could add code to the .htaccess file which would give anyone that tried to access "galleryId=201" a 403 forbidden error, and it would stop tiki from processing the request and returning error messages. This would not stop anonymous access, only access attempts for that gallery.

If you are using the tiki supplied .htaccess for using clean URLs, add the following lines after the "RewriteEngine On" line and before the tiki supplied RewriteCond/RewriteRule rules:

Copy to clipboard
# force 403 error on attempted galleryId=201 access RewriteCond %{THE_REQUEST} galleryId=201 [NC] RewriteRule .* - [F,R,L]


Be very careful adding those lines. After saving it, make sure your website is still accessible, if you make a mistake, you will get a "Internal Server Error". If you get the internal server error message, just remove those lines. Making a backup of the .htaccess file before updating it would be a good idea.

This will stop any access by a URL using the string "galleryId=201", so if you did not remove the gallery, don't add this to your .htaccess file.

This also would only work for the progressiveresearchinstitute.org that you showed in your example, the galleryId for your omahacopwatch.com domain was probably different. And you would have to update the .htaccess file for both domains to block the access to both.

Tiki does not usually reuse gallery Id numbers, so you should not have to worry about this blocking access to any new galleries.

Good luck,
Tom

There are no comments at this time.

Upcoming Events

1)  18 Apr 2024 14:00 GMT-0000
Tiki Roundtable Meeting
2)  16 May 2024 14:00 GMT-0000
Tiki Roundtable Meeting
3)  20 Jun 2024 14:00 GMT-0000
Tiki Roundtable Meeting
4)  18 Jul 2024 14:00 GMT-0000
Tiki Roundtable Meeting
5)  15 Aug 2024 14:00 GMT-0000
Tiki Roundtable Meeting
6)  19 Sep 2024 14:00 GMT-0000
Tiki Roundtable Meeting
7) 
Tiki birthday
8)  17 Oct 2024 14:00 GMT-0000
Tiki Roundtable Meeting
9)  21 Nov 2024 14:00 GMT-0000
Tiki Roundtable Meeting
10)  19 Dec 2024 14:00 GMT-0000
Tiki Roundtable Meeting