Hi all,
I have artio joomsef installed and downloaded the full version of isapi rewrite to work on my IIS server.
It worked fine until yesterday - guess it must have run out of the trial period. I downloaded the lite version but it doesn't seem to work. All the URL's bounce back to the index.php home page.
I used the same rules as dictated in the joomsef documentation for the lite version as the full version.
Does anyone have rewrite lite working with joomla? If so, can they share their genius with me on getting it to work properly?
My httpd.conf inside \\server\c\Program Files\Helicon\ISAPI_Rewrite3 looks like this:
RewriteEngine On
RewriteBase /
########## Begin - 3rd Party SEF Section
############# Use this section if you are using a 3rd party (Non Joomla! core) SEF extension - e.g. OpenSEF, 404_SEF, 404SEFx, SEF Advance, etc
#
RewriteCond %{REQUEST_URI} ^(/component/option,com) [NC,OR] ##optional - see notes##
RewriteCond %{REQUEST_URI} (/|\.htm|\.php|\.html|/[^.]*)$ [NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule (.*) index.php [L,U]
#
########## End - 3rd Party SEF Section
########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a tag in URL
RewriteCond %{QUERY_STRING} (\|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits
I copied a few lines from the log that rewrite creates if that helps:
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] escaping /index.php
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] Rewrite URL to >> /index.php
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] rewrite 'clients.html' -> '/index.php'
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] init rewrite engine with requested uri /index.php
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] Htaccess process request C:\Program Files\Helicon\ISAPI_Rewrite3\httpd.conf
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] applying pattern '(.*)' to uri 'index.php'
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] RewriteCond: input='/index.php' pattern='^(/component/option,com)' =>
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] RewriteCond: input='/index.php' pattern='(/|\.htm|\.php|\.html|/[^.]*)$' =>
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] RewriteCond: input='//marvin/wwwroot/clients.html' pattern='' =>
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] RewriteCond: input='//marvin/wwwroot/clients.html' pattern='' =>
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] escaping /index.php
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] Rewrite URL to >> /index.php
10.0.0.155 10.0.0.155 Wed, 05-Dec-2007 14:28:37 GMT [www.mdmltd.com/sid#1][rid#247864536] rewrite 'index.php' -> '/index.php'
Thanks for any help that anyone can give.
