Password Protected Page not redirecting properly

  • johannaa

    (@johannaa)


    7 years ago

    We have a password protected page that was created using the wordpress interface, this is not custom code.

    About 2 weeks ago our badgercall employee resources page login stopped working for users who log in outside of our network. Example, if I am on a work computer I can log in fine, if I try on my phone or non work computer I receive error?action=postpass. We did move the site to https with secure ssl. The permalinks were changed to match. I checked with our IT department and they state there is nothing in the .htaccess files or anywhere else that would be blocking outside users. Note that no new plugins have been introduced.

    I have been scouring the internet looking for information but haven’t found anything to solve the problem. I am looking for information/direction if possible on what could potentially be causing a problem.

    Thank you in advance.

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 17 total)
  • abletec

    (@abletec)

    Hello, johannaa, & welcome. When I attempted this, I was asked to log in, which of course I can’t do, as I don’t know & don’t want to know your credentials. So I am receiving a login screen. Are you receiving that? Or does the problem occur after you enter your password to log in?

    I notice you’ve got some caching going on. Perhaps you might want to try clearing that cache & see if that’s at all helpful.

    Thread Starter johannaa

    (@johannaa)

    Hi Jackie,

    The problem occurs after you login, instead of going to the page you get a redirect to error?action=postpass. We are using the Autoptimize plugin, I cleared the cache but it didn’t seem to have any impact. I am at a loss.

    abletec

    (@abletec)

    Hi again, johannaa. Please go to ‘Settings > General’ of your site & ensure that the url structure is in fact https://www.supportuw.org.

    If that does not help or is already in place, can we please see your .htaccess file? Please enclose it in , ie,

    line 1
line 2
line 3

    I know your IT department says it’s fine, & it likely is, but I guess I’m from Missouri even though I’m not.

    It appears you’re hosting w/Network Solutions, unless my not yet having had coffee this morning is seriously impairing my investigative prowess. If I am indeed correct here, do you have facilities such as a control panel wherein you can see error logs?

    Thread Starter johannaa

    (@johannaa)

    Hi Jackie,

    I double checked the site url and it is indeed set to https://www.supportuw.org. 

    # protect the .htaccess file
<Files .htaccess>
 Order deny,allow
 Deny from all
</Files>

# SECURE WP-CONFIG.PHP
<Files wp-config.php>
 Order deny,allow
 Deny from all
</Files>

<Files xmlrpc.php>
 Order allow,deny
 Deny from all
</Files>

# protect the phpinfo.php file
#<Files phpinfo.php>
# Order deny,allow
# Allow from 
# Allow from 
# Deny from all
#</Files>

# Fix white space issue in WordPress
# php_value "auto_prepend_file" /var/www/wejnswpwhitespacefix.php

# Compatitbility needed for IE7 and earlier
# Needs to be added to stylesheet
AddType text/x-component .htc

### COMPRESS SITE - JH 8/5/2016 ###
Header unset Pragma
FileETag None
Header unset ETag

## EXPIRES CACHING ##
<IfModule mod_expires.c>
ExpiresActive On
ExpiresByType image/jpg "access 1 year"
ExpiresByType image/jpeg "access 1 year"
ExpiresByType image/gif "access 1 year"
ExpiresByType image/png "access 1 year"
ExpiresByType text/css "access 1 month"
ExpiresByType text/html "access 1 month"
ExpiresByType application/pdf "access 1 month"
ExpiresByType text/x-javascript "access 1 month"
ExpiresByType application/x-shockwave-flash "access 1 month"
ExpiresByType image/x-icon "access 1 year"
ExpiresDefault "access 1 month"
</IfModule>
## EXPIRES CACHING ##

<FilesMatch "\\.(js|css|html|htm|php|xml)$">
 SetOutputFilter DEFLATE
</FilesMatch>
### COMPRESS SITE ###

Options +FollowSymlinks
RewriteEngine On

# disable directory browsing
Options All -Indexes

# Custom Error Pages
ErrorDocument 403 /403.html
ErrorDocument 404 /404.html
ErrorDocument 410 "<title>410 Gone</title><h1>Gone</h1><br>The requested resource<br>/<br>is no longer available on this server and there is no forwarding address. Please remove all references to this resource."

# Ultimate htaccess Blacklist from Perishable Press
# Deny domain access to spammers and other scumbags
# https://perishablepress.com/ultimate-htaccess-blacklist/
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} almaden [OR]
RewriteCond %{HTTP_USER_AGENT} ^Anarchie [OR]
RewriteCond %{HTTP_USER_AGENT} ^ASPSeek [OR]
RewriteCond %{HTTP_USER_AGENT} ^attach [OR]
RewriteCond %{HTTP_USER_AGENT} ^autoemailspider [OR]
RewriteCond %{HTTP_USER_AGENT} ^BackWeb [OR]
RewriteCond %{HTTP_USER_AGENT} ^Bandit [OR]
RewriteCond %{HTTP_USER_AGENT} ^BatchFTP [OR]
RewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR]
RewriteCond %{HTTP_USER_AGENT} ^Bot\ mailto:[email protected] [OR]
RewriteCond %{HTTP_USER_AGENT} ^Buddy [OR]
RewriteCond %{HTTP_USER_AGENT} ^bumblebee [OR]
RewriteCond %{HTTP_USER_AGENT} ^CherryPicker [OR]
RewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR]
RewriteCond %{HTTP_USER_AGENT} ^CICC [OR]
RewriteCond %{HTTP_USER_AGENT} ^Collector [OR]
RewriteCond %{HTTP_USER_AGENT} ^Copier [OR]
RewriteCond %{HTTP_USER_AGENT} ^Crescent [OR]
RewriteCond %{HTTP_USER_AGENT} ^Custo [OR]
RewriteCond %{HTTP_USER_AGENT} ^DA [OR]
RewriteCond %{HTTP_USER_AGENT} ^DIIbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^DISCo [OR]
RewriteCond %{HTTP_USER_AGENT} ^DISCo\ Pump [OR]
RewriteCond %{HTTP_USER_AGENT} ^Download\ Demon [OR]
RewriteCond %{HTTP_USER_AGENT} ^Download\ Wonder [OR]
RewriteCond %{HTTP_USER_AGENT} ^Downloader [OR]
RewriteCond %{HTTP_USER_AGENT} ^Drip [OR]
RewriteCond %{HTTP_USER_AGENT} ^DSurf15a [OR]
RewriteCond %{HTTP_USER_AGENT} ^eCatch [OR]
RewriteCond %{HTTP_USER_AGENT} ^EasyDL/2.99 [OR]
RewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR]
RewriteCond %{HTTP_USER_AGENT} email [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailCollector [OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]
RewriteCond %{HTTP_USER_AGENT} ^Express\ WebPictures [OR]
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]
RewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR]
RewriteCond %{HTTP_USER_AGENT} ^FileHound [OR]
RewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR]
RewriteCond %{HTTP_USER_AGENT} FrontPage [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^GetRight [OR]
RewriteCond %{HTTP_USER_AGENT} ^GetSmart [OR]
RewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR]
RewriteCond %{HTTP_USER_AGENT} ^gigabaz [OR]
RewriteCond %{HTTP_USER_AGENT} ^Go\!Zilla [OR]
RewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR]
RewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR]
RewriteCond %{HTTP_USER_AGENT} ^gotit [OR]
RewriteCond %{HTTP_USER_AGENT} ^Grabber [OR]
RewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR]
RewriteCond %{HTTP_USER_AGENT} ^Grafula [OR]
RewriteCond %{HTTP_USER_AGENT} ^grub-client [OR]
RewriteCond %{HTTP_USER_AGENT} ^HMView [OR]
RewriteCond %{HTTP_USER_AGENT} ^HTTrack [OR]
RewriteCond %{HTTP_USER_AGENT} ^httpdown [OR]
RewriteCond %{HTTP_USER_AGENT} .*httrack.* [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^ia_archiver [OR]
RewriteCond %{HTTP_USER_AGENT} ^Image\ Stripper [OR]
RewriteCond %{HTTP_USER_AGENT} ^Image\ Sucker [OR]
RewriteCond %{HTTP_USER_AGENT} ^Indy*Library [OR]
RewriteCond %{HTTP_USER_AGENT} Indy\ Library [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^InterGET [OR]
RewriteCond %{HTTP_USER_AGENT} ^InternetLinkagent [OR]
RewriteCond %{HTTP_USER_AGENT} ^Internet\ Ninja [OR]
RewriteCond %{HTTP_USER_AGENT} ^InternetSeer.com [OR]
RewriteCond %{HTTP_USER_AGENT} ^Iria [OR]
RewriteCond %{HTTP_USER_AGENT} ^JBH*agent [OR]
RewriteCond %{HTTP_USER_AGENT} ^JetCar [OR]
RewriteCond %{HTTP_USER_AGENT} ^JOC\ Web\ Spider [OR]
RewriteCond %{HTTP_USER_AGENT} ^JustView [OR]
RewriteCond %{HTTP_USER_AGENT} ^larbin [OR]
RewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR]
RewriteCond %{HTTP_USER_AGENT} ^LexiBot [OR]
RewriteCond %{HTTP_USER_AGENT} ^lftp [OR]
RewriteCond %{HTTP_USER_AGENT} ^Link*Sleuth [OR]
RewriteCond %{HTTP_USER_AGENT} ^likse [OR]
RewriteCond %{HTTP_USER_AGENT} ^Link [OR]
RewriteCond %{HTTP_USER_AGENT} ^LinkWalker [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mag-Net [OR]
RewriteCond %{HTTP_USER_AGENT} ^Magnet [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mass\ Downloader [OR]
RewriteCond %{HTTP_USER_AGENT} ^Memo [OR]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft.URL [OR]
RewriteCond %{HTTP_USER_AGENT} ^MIDown\ tool [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mirror [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mister\ PiX [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*Indy [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*NEWT [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla*MSIECrawler [OR]
RewriteCond %{HTTP_USER_AGENT} ^MS\ FrontPage* [OR]
RewriteCond %{HTTP_USER_AGENT} ^MSFrontPage [OR]
RewriteCond %{HTTP_USER_AGENT} ^MSIECrawler [OR]
RewriteCond %{HTTP_USER_AGENT} ^MSProxy [OR]
RewriteCond %{HTTP_USER_AGENT} ^Navroad [OR]
RewriteCond %{HTTP_USER_AGENT} ^NearSite [OR]
RewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR]
RewriteCond %{HTTP_USER_AGENT} ^NetMechanic [OR]
RewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR]
RewriteCond %{HTTP_USER_AGENT} ^Net\ Vampire [OR]
RewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR]
RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO [OR]
RewriteCond %{HTTP_USER_AGENT} ^Ninja [OR]
RewriteCond %{HTTP_USER_AGENT} ^Octopus [OR]
RewriteCond %{HTTP_USER_AGENT} ^Offline\ Explorer [OR]
RewriteCond %{HTTP_USER_AGENT} ^Offline\ Navigator [OR]
RewriteCond %{HTTP_USER_AGENT} ^Openfind [OR]
RewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR]
RewriteCond %{HTTP_USER_AGENT} ^Papa\ Foto [OR]
RewriteCond %{HTTP_USER_AGENT} ^pavuk [OR]
RewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR]
# RewriteCond %{HTTP_USER_AGENT} ^Ping [OR]
RewriteCond %{HTTP_USER_AGENT} ^PingALink [OR]
RewriteCond %{HTTP_USER_AGENT} ^Pockey [OR]
RewriteCond %{HTTP_USER_AGENT} ^psbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^Pump [OR]
RewriteCond %{HTTP_USER_AGENT} ^QRVA [OR]
RewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR]
RewriteCond %{HTTP_USER_AGENT} ^Reaper [OR]
RewriteCond %{HTTP_USER_AGENT} ^Recorder [OR]
RewriteCond %{HTTP_USER_AGENT} ^ReGet [OR]
RewriteCond %{HTTP_USER_AGENT} ^Scooter [OR]
RewriteCond %{HTTP_USER_AGENT} ^Seeker [OR]
RewriteCond %{HTTP_USER_AGENT} ^Siphon [OR]
RewriteCond %{HTTP_USER_AGENT} ^sitecheck.internetseer.com [OR]
RewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR]
RewriteCond %{HTTP_USER_AGENT} ^SlySearch [OR]
RewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR]
RewriteCond %{HTTP_USER_AGENT} ^Snake [OR]
RewriteCond %{HTTP_USER_AGENT} ^SpaceBison [OR]
RewriteCond %{HTTP_USER_AGENT} ^sproose [OR]
RewriteCond %{HTTP_USER_AGENT} ^Stripper [OR]
RewriteCond %{HTTP_USER_AGENT} ^Sucker [OR]
RewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR]
RewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR]
RewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^Szukacz [OR]
RewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR]
RewriteCond %{HTTP_USER_AGENT} ^Teleport\ Pro [OR]
RewriteCond %{HTTP_USER_AGENT} ^URLSpiderPro [OR]
RewriteCond %{HTTP_USER_AGENT} ^Vacuum [OR]
RewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR]
RewriteCond %{HTTP_USER_AGENT} ^Web\ Image\ Collector [OR]
RewriteCond %{HTTP_USER_AGENT} ^Web\ Sucker [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR]
RewriteCond %{HTTP_USER_AGENT} ^[Ww]eb[Bb]andit [OR]
RewriteCond %{HTTP_USER_AGENT} ^webcollage [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR]
RewriteCond %{HTTP_USER_AGENT} ^Web\ Downloader [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtrac.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebGo\ IS [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebHook [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebMiner [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebMirror [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR]
RewriteCond %{HTTP_USER_AGENT} ^Website [OR]
RewriteCond %{HTTP_USER_AGENT} ^Website\ eXtractor [OR]
RewriteCond %{HTTP_USER_AGENT} ^Website\ Quester [OR]
RewriteCond %{HTTP_USER_AGENT} ^Webster [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR]
RewriteCond %{HTTP_USER_AGENT} WebWhacker [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR]
RewriteCond %{HTTP_USER_AGENT} ^Wget [OR]
RewriteCond %{HTTP_USER_AGENT} ^Whacker [OR]
RewriteCond %{HTTP_USER_AGENT} ^Widow [OR]
RewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR]
RewriteCond %{HTTP_USER_AGENT} ^x-Tractor [OR]
RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [OR]
RewriteCond %{HTTP_USER_AGENT} ^Xenu [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus
RewriteRule ^.* - [F,L]

# 5G BLACKLIST/FIREWALL
# @ https://perishablepress.com/5g-blacklist/

# 5G:[QUERY STRINGS]
#<ifModule mod_rewrite.c>
# RewriteEngine On
# RewriteBase /
# RewriteCond %{QUERY_STRING} (localhost|mosconfig|scanner) [NC,OR]
# RewriteCond %{QUERY_STRING} (menu|mod|path|tag)\=\.?/? [NC,OR]
# RewriteCond %{QUERY_STRING} (mod|path|tag)\=\.?/? [NC,OR]
# RewriteCond %{QUERY_STRING} boot\.ini  [NC,OR]
# RewriteCond %{QUERY_STRING} echo.*kae  [NC,OR]
# RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
# RewriteCond %{QUERY_STRING} \=\\%27$   [NC,OR]
# RewriteCond %{QUERY_STRING} \=\\\'$    [NC,OR]
# RewriteCond %{QUERY_STRING} \.\./      [NC,OR]
# RewriteCond %{QUERY_STRING} \?         [NC,OR]
# RewriteCond %{QUERY_STRING} \:         [NC]
# RewriteRule .* - [F]
#</ifModule>

# 5G:[USER AGENTS]
<ifModule mod_setenvif.c>
# SetEnvIfNoCase User-Agent ^$ keep_out
 SetEnvIfNoCase User-Agent (casper|cmsworldmap|diavol|dotbot)   keep_out
 SetEnvIfNoCase User-Agent (flicky|ia_archiver|jakarta|kmccrew) keep_out
 SetEnvIfNoCase User-Agent (libwww|planetwork|pycurl|skygrid)   keep_out
 SetEnvIfNoCase User-Agent (purebot|comodo|feedfinder|turnit)   keep_out
 SetEnvIfNoCase User-Agent (zmeu|nutch|vikspider|binlar|sucker) keep_out
 <limit GET POST PUT>
  Order Allow,Deny
  Allow from all
  Deny from env=keep_out
 </limit>
</ifModule>

# 5G:[REQUEST STRINGS]
<ifModule mod_alias.c>
 RedirectMatch 403 (https?|ftp|php)\://
 RedirectMatch 403 /(cgi|https?|ima|ucp)/
 RedirectMatch 403 /(Permanent|Better)$
 RedirectMatch 403 (\=\\\'|\=\\%27|/\\\'/?|\)\.css\()$
 RedirectMatch 403 (\,|//|\)\+|/\,/|\{0\}|\(/\(|\.\.\.|\+\+\+|\||\\\"\\\")
 RedirectMatch 403 \.(cgi|asp|aspx|cfg|dll|exe|jsp|mdb|sql|ini|rar)$
 RedirectMatch 403 /(contac|fpw|install|pingserver|register)\.php$
 RedirectMatch 403 (base64|crossdomain|localhost|wwwroot|e107\_)
 RedirectMatch 403 (eval\(|\_vti\_|\(null\)|echo.*kae|config\.xml)
 RedirectMatch 403 \.well\-known/host\-meta
 RedirectMatch 403 /function\.array\-rand
 RedirectMatch 403 \)\;\$\(this\)\.html\(
 RedirectMatch 403 proc/self/environ
 RedirectMatch 403 msnbot\.htm\)\.\_
 RedirectMatch 403 /ref\.outcontrol
 RedirectMatch 403 com\_cropimage
 RedirectMatch 403 indonesia\.htm
 RedirectMatch 403 \{\$itemURL\}
 RedirectMatch 403 function\(\)
 RedirectMatch 403 labels\.rdf
 RedirectMatch 403 /playing.php
 RedirectMatch 403 muieblackcat
</ifModule>

# www.supportuw.org redirects
# supportuw.com supportuw.net redirects
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.(com|net)$ [NC]
RewriteRule ^(.*)$ https://www.supportuw.org/ [R=301,L,NC]

# Block possible SPAMMERS
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^action=register.*$
RewriteRule ^.*$ /formspam/? [R=301,L,NC]

# uwgreatpeople redirects
RewriteCond %{HTTP_HOST} ^(www\.|)uwgreatpeople\.(org|com)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/greatpeople [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)greatpeoplegreatplace\.(org|com)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/greatpeople [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)greatpeoplegreatplaces\.(org|com)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/greatpeople [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)greatpeoplescholarship\.org$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/greatpeople [R,L,NC]

# /events fix for SOHE Afternoon
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^events/soheafternoon(.*)$ https://www.uwevents.com/ereg/newreg.php?eventid=312345& [R,L,NC]

# Maintenance Page Redirect
RewriteCond %{HTTP_HOST} ^maintenance\.supportuw\.org$ [NC]
RewriteRule ^(.*)$ https://www.supportuw.org/ [R=301,L,NC]

# secure.supportuw.org Redirect
RewriteCond %{HTTP_HOST} ^secure\.supportuw\.org$ [NC]
RewriteRule ^(.*)$ https://www.supportuw.org/giving [R=301,L,NC]

# /give Page Redirect
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^give(|/)$ https://secure.supportuw.org/give [R=301,L,NC]

# Sequence Number Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^seq=(.*)$
RewriteRule ^MultiPage/processStep1.do(.*)$ https://www.supportuw.org/giveto/%1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^form=(.*)$
RewriteRule ^MultiPage/processStep1.do(.*)$ https://www.supportuw.org/giveto/%1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
RewriteRule ^MultiPage/processStep1.do(.*)$ https://myuwconnect.org/give [R,L,NC]

# Giving Sequence Number Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^seq=(.*)$
RewriteRule ^giving(.*)$ https://www.supportuw.org/giveto/%1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www|secure|)\.supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^form=(.*)$
RewriteRule ^giving(.*)$ https://www.supportuw.org/giveto/%1 [R,L,NC]

# PowerOfNursing redirect
RewriteCond %{HTTP_HOST} ^(www\.|)powerofnursing\.wisc\.edu$ [NC]
RewriteRule ^.*$ https://son.wisc.edu/ [L]

# Student Foundation redirect
RewriteCond %{HTTP_HOST} ^(studentfoundation\.wisc\.edu|(www\.|)uwstudentfoundation\.(net|com|org))$ [NC]
RewriteRule ^(.*)$ https://www.studentfoundation.wisc.edu [R=301,L,NC]

# Give To Wisconsin redirects
RewriteCond %{HTTP_HOST} ^(www\.|)givetowisconsin\.(com|net|org)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/ [R=301,L,NC]

# myuwconnect redirects
RewriteCond %{HTTP_HOST} ^(www\.|)myuwconnect\.(com|net|org)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/ [R=301,L,NC]

# Concur Redirect Rule
RewriteCond %{HTTP_HOST} ^concur\.supportuw\.org$ [NC]
RewriteRule ^.*$ https://uwfoundation.onelogin.com/launch/627727 [R,L,NC]

# Concur Solutions Redirect Rule
RewriteCond %{HTTP_HOST} ^www\.concursolutions\.com$ [NC]
RewriteRule ^.*$ https://uwfoundation.onelogin.com/launch/627727 [R,L,NC]

# 1848 Redirect
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^1848.*$ /leadership-giving/1848-society/ [R,L,NC]

# Vanity URLs Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} !^unit=(.*)$
RewriteCond %{QUERY_STRING} ^(.*)$
RewriteRule ^giveto/(.*)$ /giveto/?unit=$1&%1 [R,L,NC]

# Another Vanity URL Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} !^unit=(.*)$
RewriteCond %{QUERY_STRING} ^(.*)$
RewriteRule ^pledge/(.*)$ /pledge/?unit=$1&%1 [R,L,NC]

# Stewardship Profiles Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} !^unit=(.*)$
RewriteRule ^profile/(.*)$ /profile/?unit=$1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^alumnipark(.*)$ https://www.supportuw.org/how-to-give/area-program/alumni-park/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^annualreport.*$ https://www.supportuw.org/publications/annual-report/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^badgergrad(.*)$ /students/campaign-rep-application/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^caf.*$ https://www.supportuw.org/how-to-give/chancellors-annual-fund/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^cals.*$ https://www.supportuw.org/how-to-give/school-college/cals/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^campus-partners/services/events/submit-donor-event/.*$ https://about.uwadvancement.org/programs-events/event-request/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^campus-partners/services/events/submit-advancement-event/.*$ https://about.uwadvancement.org/programs-events/event-request/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} !^t=(.*)$
RewriteCond %{QUERY_STRING} ^(.*)$
RewriteRule ^difference/(.*)$ /difference/?t=$1&%1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^disclosures.*$ https://www.supportuw.org/about-us/state-disclosures/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^funds.*$ https://www5.supportuw.org/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gifts.*$ https://www.supportuw.org/gift-planning/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^givingsetup.*$ https://about.uwadvancement.org/development/giving-url-request/ [R,L,NC]

# New UW Green Bay Online Giving Redirect
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^form=uwgb(|&fbcd=5)$
RewriteRule ^.*$ https://www.uwgb.edu/foundation/ways/online.asp$1? [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^board.*$ /about-us/board-of-directors/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^bhs(|/)$ /bascom-hill-society/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^diversity(|/)$ /how-to-give/diversity/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^campus-partners/cfr/funding-request.*$ https://about.uwadvancement.org/government-corporate/request-for-assistance/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^careyscholarship.*$ /how-to-give/school-college/medicine-and-public-health/john-carey-scholarship/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gpfs.*$ /giving/?form=fs [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gp.*$ /giving/?form=gp [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^greatpeople.*$ /how-to-give/area-program/great-people-scholarship/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^harterscholarship.*$ /how-to-give/school-college/medicine-and-public-health/karl-harter-scholarship/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^hillel.*$ /how-to-give/area-program/hillel/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^leadership-giving/womens-philanthropy/.*$ /womens-philanthropy/ [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^legacy.*$ /gift-planning/wisconsin-legacy-society [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^makeagift.*$ /how-to-give/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^match.*$ /how-to-give/matching-gifts/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^mgivingHelp.*$ https://secure.supportuw.org/PayPalDonate/public/help.jsp [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} ^(.*)$
RewriteRule ^mgiving(.*)$ https://secure.supportuw.org/PayPalDonate/SetCheckout?$1%1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^minimed.*$ https://www.supportuw.org/news-post/uw-mini-med-school-2011/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^mobileuw.*$ /give/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^nelson.*$ https://www.supportuw.org/how-to-give/school-college/nelson-institute/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^portal.*$ https://www4.supportuw.org/wps/portal [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^privacy.*$ https://www.supportuw.org/about-us/privacy/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^sam.*$ https://www.supportuw.org/perspectives/samantha-overgaard/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^scg.*$ https://www.supportuw.org/students/senior-class-gift/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^seniorclass.*$ https://www.supportuw.org/students/senior-class-gift/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^share-your-story/(.*)$ https://www.supportuw.org/share-your-story/$1 [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^telefund.*$ /badgercall/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^update.*$ https://www.supportuw.org/contact-us/update/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^uwgb.*$ https://www.uwgb.edu/foundation/ways/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wpc.*$ /womens-philanthropy/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wpp.*$ https://www.supportuw.org/how-to-give/area-program/wisconsin-partnership-program/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wwa.*$ https://www.supportuw.org/bascom-hill-society/weekend-away/ [R,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/articles_certified.pdf https://www.supportuw.org/wp-content/uploads/articles_of_incorporation.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/tax_exemption_affidavit.pdf https://www.supportuw.org/wp-content/uploads/tax_exemption_affidavit.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/bylaws_10_06.pdf https://www.supportuw.org/wp-content/uploads/bylaws_10_06.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/Form_990_2008.pdf https://www.supportuw.org/wp-content/uploads/Form_990_2008.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/Form_990T_2008.pdf https://www.supportuw.org/wp-content/uploads/Form_990T_2008.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/Form_990T_2007.pdf https://www.supportuw.org/wp-content/uploads/Form_990T_2007.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/irs_tax_determination_letter.pdf https://www.supportuw.org/wp-content/uploads/irs_tax_determination_letter.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/wills_trusts_suggested_language.pdf https://www.supportuw.org/wp-content/uploads/wills_trusts_suggested_language.pdf [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^wp-content/uploads/2010/07/Form_990_2007.pdf https://www.supportuw.org/wp-content/uploads/Form_990_2007.pdf [R=301,L,NC]

# 2012 Website Redesign Rules
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^bascom-hill-society/(.*)$ /leadership-giving/bascom-hill-society/$1 [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/estate-gifts/will/$ https://www.supportuw.org/gift-planning/will [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/your-will/$ https://www.supportuw.org/gift-planning/will/your-will [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/estate-gifts/life-income/immediate-annuity/$ https://www.supportuw.org/gift-planning/life-income/charitable-gift-annuity [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/estate-gifts/life-income/(.*)$ https://www.supportuw.org/gift-planning/life-income/$1 [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/annuity-rates/$ https://www.supportuw.org/gift-planning/life-income/charitable-gift-annuity/annuity-rates [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^about-us/womens-philanthropy/$ https://www.supportuw.org/leadership-giving/womens-philanthropy [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^contact-us/follow-us/$ https://www.supportuw.org/contact-us [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^leadership-giving/bascom-hill-society/weekend-away/$ https://www.supportuw.org/leadership-giving/bascom-hill-society/wwc [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^leadership-giving/importance-of-annual-gifts/$ https://www.supportuw.org/annual-giving/importance [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/life-stages/under-age-60/$ https://www.supportuw.org/gift-planning/life-stages/ages-22-45 [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/life-stages/ages-60-70/$ https://www.supportuw.org/gift-planning/life-stages/ages-45-65 [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^gift-planning/life-stages/over-age-70/$ https://www.supportuw.org/gift-planning/life-stages/over-age-65 [R=301,L,NC]

# make-a-gift catch all rule
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^making-a-gift/(.*)$ /how-to-give/$1 [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^students/senior-class-gift/$ https://www.supportuw.org/students/philanthropy [R=301,L,NC]

# telefund.wisc.edu catch all rule
RewriteCond %{HTTP_HOST} ^(|www\.)telefund\.wisc\.edu$ [NC]
RewriteRule ^(.*)$ https://www.supportuw.org/badgercall/ [R=301,L,NC]

# Event URLs Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} !^s=(.*)$
RewriteCond %{QUERY_STRING} ^(.*)$
RewriteRule ^event/(.*)$ /event/?s=$1&%1 [R,L,NC]

# VHS Survey Fix
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^survey/vanhise$ /surveys/vanhise [R,L,NC]

# Surveys URLs Rewrite Rule
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{QUERY_STRING} !^s=(.*)$
RewriteCond %{QUERY_STRING} ^(.*)$
RewriteRule ^surveys/(.*)$ /surveys/?s=$1&%1 [R,L,NC]

# Event Calendar Redirect
RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteCond %{REQUEST_URI} !^/events/soheafternoon(.*)$
RewriteRule ^events(.*)$ https://about.uwadvancement.org/events/ [R,NC,L]

# *.sharethewonderful.org Redirect
RewriteCond %{HTTP_HOST} ^(www\.|)sharethewonderful\.(com|org)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/annual-giving/campaign/ [R,NC,L]

# www.uwfoundation.wisc.edu giving rule
RewriteCond %{HTTP_HOST} ^(www\.|)uwfoundation\.wisc\.edu$ [NC]
RewriteRule ^giving(.*)$ https://www.supportuw.org/giving$1 [R=301,L,NC]

RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
RewriteRule ^about-us/vision-mission-values/$ /about-us/mission-beliefs-values/ [R=301,L,NC]

# www.uwfoundation.wisc.edu catch all rule
# www.uwfound.wisc.edu catch all rule
RewriteCond %{HTTP_HOST} ^(www\.|)(uwfoundation|uwfound)\.wisc\.edu$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/ [R=301,L,NC]

# www.advanceuw.org catch all rule
RewriteCond %{HTTP_HOST} ^(www\.|)advanceuw\.(org|com|net)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/ [R=301,L,NC]

# www.uwadvancement.org catch all rule
RewriteCond %{HTTP_HOST} ^(www\.|)uwadvancement\.(org|com|net)$ [NC]
RewriteRule ^.*$ https://www.supportuw.org/ [R=301,L,NC]

# Block external access to wp-login.php file
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{REQUEST_URI} ^.*?wp-login\.php.*$
RewriteCond expr "! -R '[IP]/16'"
RewriteRule ^.*$ /error [R,L]
</IfModule>

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress
    • This reply was modified 7 years ago by stephencottontail.
    • This reply was modified 7 years ago by Samuel Wood (Otto). Reason: redact all IP addresses from the htaccess file, per request
    Thread Starter johannaa

    (@johannaa)

    Jackie,

    Would you please delete or make the htacces file private after viewing I cannot have it sitting out on the Internet.

    Moderator Samuel Wood (Otto)

    (@otto42)

    www.remarpro.com Admin

    @johannaa He doesn’t have the ability to delete the contents of that forum post, and we don’t delete things on the forum without a reason.

    What is there in that htaccess which you consider private? We might redact some of the information, but in general, if you don’t want it to be public, do not post it on a public forum. Asking our volunteer moderators to delete data which is not necessarily private or important is simply too much of an ask for a heavily trafficked forum.

    More to the point, you’ve posted it, therefore it is on the internet and will remain so more or less forever. Google likes our site very much, so even if we do redact it, then it’s too late, Google already has it, as do many others. People subscribe to this forum via emails, other sites mirror it. We cannot delete it from everywhere, so, it’s already on the internet from the moment you posted it and that cannot be undone.

    Thread Starter johannaa

    (@johannaa)

    That is unfortunate. I posted in haste, my company has strict security policies and would not want this information out on the internet. I understand what you are saying but am unsure how simply removing the htaccess will negatively impact the site.

    abletec

    (@abletec)

    Johannaa, actually, I find these last lines possibly contributory:
    # Block external access to wp-login.php file
    <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{REQUEST_URI} ^.*?wp-login\.php.*$
    RewriteCond expr “! -R ‘192.168.0.0/16′”
    RewriteRule ^.*$ /error [R,L]
    </IfModule>

    Can you check w/your IT folks?

    abletec

    (@abletec)

    I feel terrible for asking now, but, having said that, the lines I point out look as though they may be contributory. This is 1 of the standard procedures in these sorts of circumstances.

    Moderator Samuel Wood (Otto)

    (@otto42)

    www.remarpro.com Admin

    That is unfortunate. I posted in haste, my company has strict security policies and would not want this information out on the internet. I understand what you are saying but am unsure how simply removing the htaccess will negatively impact the site.

    Removing it won’t negatively impact us at all. But people posting stuff and then asking for them to be removed for invalid reasons wastes a lot of the time of our volunteer staff.

    As it says in the Forum Welcome:

    Forum topics will only be edited or deleted at the discretion of the moderators if they represent a valid legal, security, or safety concern.

    This is not one of those three cases. There’s no secret information in your file that I can see. Just a bunch of IP and UserAgent blocking rules (which are more or less worthless and you should probably remove them) as well as a bunch of redirects which are all for public facing pages on your site anyway.

    If you can point to a specific piece of info there that represents one of those three concerns, then we’ll remove that specific piece for you.

    Basically, if you don’t want it to be public, then don’t post it in a public place. And especially don’t violate the policies of your own company.

    Moderator Samuel Wood (Otto)

    (@otto42)

    www.remarpro.com Admin

    Oh, and @abletec is absolutely correct. The password protection handler is in the wp-login.php code. That code she pointed out in your htaccess will prevent access to that file from external sources. So, as long as that is in there, the normal WordPress password protected posts feature will not work for anybody outside your local network.

    abletec

    (@abletec)

    @otto42, wrong gender, but, that’s ok. thank you for your help, & please accept my apologies if I was in any way out of line. I am truly sorry if that’s the case.

    Moderator Samuel Wood (Otto)

    (@otto42)

    www.remarpro.com Admin

    Nothing to apologize for. The contents of htaccess is not typically considered to be private information, because it generally doesn’t have any secrets in it.

    rwtrefz

    (@rwtrefz)

    Hi Samuel-
    My name is Rob Trefz, I’m the lead Network and Security Engineer for UW Foundation, the company responsible for managing supportuw.org, and a co-worker of Johanna’s.

    My main concern with the .htaccess confg is that it contains private Ip address information about our company. While not a huge deal, it would aid someone performing reconnaissance. Is it possible to sanitize the post by removing the IPs? Thanks!

    Rob Trefz

    Moderator Samuel Wood (Otto)

    (@otto42)

    www.remarpro.com Admin

    @rwtrefz As requested, I have removed all IP addresses from the file.

Viewing 15 replies - 1 through 15 (of 17 total)
  • The topic ‘Password Protected Page not redirecting properly’ is closed to new replies.