Examples
Prev | Home | Next

## Examples

### Parameter checking

Regular expressions can be pretty powerful. Here is how you can check whether a parameter is an integer between 0 and 99999:

    SecFilterSelective ARG_parameter "!^[0-9]{1,5}$"

### File upload

Forbid file upload for the application as a whole, but allow it in a subfolder:

    # Reject requests with header "Content-Type" set
    # to "multipart/form-data"
    SecFilterSelective HTTP_CONTENT_TYPE multipart/form-data

    # Only for the script that performs upload
    <Location /upload.php>
        # Do not inherit filters from the parent folder
        SecFilterInheritance Off
    </Location>

### Securing FormMail

Earlier versions of FormMail could be abused to send email to any recipient (I've been told that there is a new version that can be secured properly).

    # Only for the FormMail script
    <Location /cgi-bin/FormMail>
        # Reject request where the value of parameter "recipient"
        # does not end with "@webkreator.com"
        SecFilterSelective ARG_recipient "![a-zA-Z0-9]+@webkreator\.com$">
    </Location>

Prev |  | Next
Miscellaneous Topics | Home | Appendix A: Recommended Configuration

Copyright (C) 2002-2006 Thinking Stone