Potential threat identified in .htaccess
Mar 1, 2017 7:30 pm by Hannah
Mar 1, 2017 7:30 pm by Hannah
The WP plugin Anti-Malware from GOTMLS.NET identified the Gtranslate entries in our .htaccess file. It says regarding this section of code:
RewriteRule ^(af|sq|am|ar|hy|az|eu|be|bn|bs|bg|ca|ceb|ny|zh-CN|zh-TW|co|hr|cs|da|nl|en|eo|et|tl|fi|fr|fy|gl|ka|de|el|gu|ht|ha|haw|iw|hi|hmn|hu|is|ig|id|ga|it|ja|jw|kn|kk|km|ko|ku|ky|lo|la|lv|lt|lb|mk|mg|ms|ml|mt|mi|mr|mn|my|ne|no|ps|fa|pl|pt|pa|ro|ru|sm|gd|sr|st|sn|sd|si|sk|sl|so|es|su|sw|sv|tg|ta|te|th|tr|uk|ur|uz|vi|cy|xh|yi|yo|zu)/(.*)$ /gtranslate/gtranslate.php?glang=$1&gurl=$2 [L,QSA]
Threat identified: "RewriteEngine on UNCONDITIONAL RewriteRule"
Have no idea what that means, but is there a way to fix it? Or is it really not a security threat, after all?
Also, we seem to have duplicate GTranslate entries in our .htaccess file. Can we delete some of this? Or is it all required? Thanks!
# gtranslate config
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteRule ^(af|sq|am|ar|hy|az|eu|be|bn|bs|bg|ca|ceb|ny|zh-CN|zh-TW|co|hr|cs|da|nl|en|eo|et|tl|fi|fr|fy|gl|ka|de|el|gu|ht|ha|haw|iw|hi|hmn|hu|is|ig|id|ga|it|ja|jw|kn|kk|km|ko|ku|ky|lo|la|lv|lt|lb|mk|mg|ms|ml|mt|mi|mr|mn|my|ne|no|ps|fa|pl|pt|pa|ro|ru|sm|gd|sr|st|sn|sd|si|sk|sl|so|es|su|sw|sv|tg|ta|te|th|tr|uk|ur|uz|vi|cy|xh|yi|yo|zu)/(af|sq|am|ar|hy|az|eu|be|bn|bs|bg|ca|ceb|ny|zh-CN|zh-TW|co|hr|cs|da|nl|en|eo|et|tl|fi|fr|fy|gl|ka|de|el|gu|ht|ha|haw|iw|hi|hmn|hu|is|ig|id|ga|it|ja|jw|kn|kk|km|ko|ku|ky|lo|la|lv|lt|lb|mk|mg|ms|ml|mt|mi|mr|mn|my|ne|no|ps|fa|pl|pt|pa|ro|ru|sm|gd|sr|st|sn|sd|si|sk|sl|so|es|su|sw|sv|tg|ta|te|th|tr|uk|ur|uz|vi|cy|xh|yi|yo|zu)/(.*)$ /$1/$3 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(af|sq|am|ar|hy|az|eu|be|bn|bs|bg|ca|ceb|ny|zh-CN|zh-TW|co|hr|cs|da|nl|en|eo|et|tl|fi|fr|fy|gl|ka|de|el|gu|ht|ha|haw|iw|hi|hmn|hu|is|ig|id|ga|it|ja|jw|kn|kk|km|ko|ku|ky|lo|la|lv|lt|lb|mk|mg|ms|ml|mt|mi|mr|mn|my|ne|no|ps|fa|pl|pt|pa|ro|ru|sm|gd|sr|st|sn|sd|si|sk|sl|so|es|su|sw|sv|tg|ta|te|th|tr|uk|ur|uz|vi|cy|xh|yi|yo|zu)/(.*)$ /gtranslate/gtranslate.php?glang=$1&gurl=$2 [L,QSA]
RewriteRule ^(af|sq|am|ar|hy|az|eu|be|bn|bs|bg|ca|ceb|ny|zh-CN|zh-TW|co|hr|cs|da|nl|en|eo|et|tl|fi|fr|fy|gl|ka|de|el|gu|ht|ha|haw|iw|hi|hmn|hu|is|ig|id|ga|it|ja|jw|kn|kk|km|ko|ku|ky|lo|la|lv|lt|lb|mk|mg|ms|ml|mt|mi|mr|mn|my|ne|no|ps|fa|pl|pt|pa|ro|ru|sm|gd|sr|st|sn|sd|si|sk|sl|so|es|su|sw|sv|tg|ta|te|th|tr|uk|ur|uz|vi|cy|xh|yi|yo|zu)$ /$1/ [R=301,L]
Re: Potential threat identified in .htaccess
Mar 2, 2017 7:26 am by Yana
Mar 2, 2017 7:26 am by Yana
Hi,
It is not a security threat. There is no need to worry about that.
There is no duplicate rule. You can compare the rules here
https://gtranslate.io/docs/58-gtranslat ... umentation
Re: Potential threat identified in .htaccess
Mar 2, 2017 6:30 pm by Hannah
Mar 2, 2017 6:30 pm by Hannah
Okay, thank you!
Re: Potential threat identified in .htaccess
Mar 2, 2017 6:35 pm by Edvard
Mar 2, 2017 6:35 pm by Edvard
You are welcome.
SIMILAR TOPICS
Redirect to subdomain in .htaccess using Accept-language | Dec 27, 2016 5:44 am | Replies: 5 | Post by: freebouba |
htaccess (301 redirects) Cache | Sep 19, 2016 9:36 am | Replies: 3 | Post by: belgor |
Need updated htaccess rules for Windows IIS web.config | May 24, 2016 2:03 pm | Replies: 5 | Post by: mjbradley85 |
Do we need .htaccess changes for enterprise version | Apr 25, 2016 5:18 pm | Replies: 1 | Post by: sadashiv |
.htaccess file | Mar 20, 2015 3:57 pm | Replies: 1 | Post by: rpiazza |