[Summary view] [Print] [Text view]

   1  <?xml version="1.0" encoding="UTF-8"?>
   2  <configuration>
   3     <system.webServer>
   4         <rewrite>
   5             <rules>
   6                 <rule name="Joomla! Rule 1" stopProcessing="true">
   7                     <match url="^(.*)$" ignoreCase="false" />
   8                     <conditions logicalGrouping="MatchAny">
   9                         <add input="{QUERY_STRING}" pattern="base64_encode[^(]*\([^)]*\)" ignoreCase="false" />
  10                         <add input="{QUERY_STRING}" pattern="(&gt;|%3C)([^s]*s)+cript.*(&lt;|%3E)" />
  11                         <add input="{QUERY_STRING}" pattern="GLOBALS(=|\[|\%[0-9A-Z]{0,2})" ignoreCase="false" />
  12                         <add input="{QUERY_STRING}" pattern="_REQUEST(=|\[|\%[0-9A-Z]{0,2})" ignoreCase="false" />
  13                     </conditions>
  14                     <action type="CustomResponse" url="index.php" statusCode="403" statusReason="Forbidden" statusDescription="Forbidden" />
  15                 </rule>
  16                 <rule name="Joomla! Rule 2">
  17                     <match url="(.*)" ignoreCase="false" />
  18                     <conditions logicalGrouping="MatchAll">
  19                       <add input="{URL}" pattern="^/index.php" ignoreCase="true" negate="true" />
  20                       <add input="{URL}" pattern="/component/|(/[^.]*|\.(php|html?|feed|pdf|vcf|raw))$" />
  21                       <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" />
  22                       <add input="{REQUEST_FILENAME}" matchType="IsDirectory" ignoreCase="false" negate="true" />
  23                     </conditions>
  24                     <action type="Rewrite" url="index.php" />
  25                 </rule>
  26             </rules>
  27         </rewrite>
  28     </system.webServer>
  29  </configuration>