htaccess question

  • My htaccess file looks fishy. I removed a malicious files called default.php and there is a reference to it in my htaccess. Do you see anything suspicious here?

    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule (.*2e30f.*|^tobeornottobe$) /ikcheck.php?q=$1 [L]
    RewriteRule ^ikcheck.php$ – [L]
    </IfModule>
    # Use PHP5.4 Single php.ini as default

    AddHandler application/x-httpd-php54s .php

    <IfModule mod_rewrite.c>

    RewriteEngine On

    RewriteBase /

    RewriteCond %{REQUEST_FILENAME} !-f

    RewriteRule ^[a-z0-9]{1,4}[.](htm|pdf|jar) default.php [L]

    </IfModule>

    # BEGIN WordPress

    <IfModule mod_rewrite.c>

    RewriteEngine On

    RewriteBase /

    RewriteRule ^index\.php$ – [L]

    RewriteCond %{REQUEST_FILENAME} !-f

    RewriteCond %{REQUEST_FILENAME} !-d

    RewriteRule . /index.php [L]

    </IfModule>

    # END WordPress

Viewing 4 replies - 1 through 4 (of 4 total)

  • I don’t think anything before # BEGIN WordPress is necessary.

    Make a copy of the .htaccess file as it is now, then remove everything before # BEGIN WordPress

    If for some reason that kills your site (I don’t think it will), re-upload the backup copy.

    Thread Starter osu9400

    (@osu9400)

    Matt-

    Thanks for the reply. Unfortunately, it killed the website with “page not found” errors.

    Try refreshing the permalinks by going to Settings > Permalinks. Don’t change any settings, just hit “Save.” Then re-visit your site and see if you can load the pages again.

    Thread Starter osu9400

    (@osu9400)

    Thanks. I actually uploaded the file again and it worked without refreshing the permalinks. You’ve been very helpful.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘htaccess question’ is closed to new replies.