Jump to content

Recommended Posts

Pouvez vous me dire si mon fichier .htaccess tient la route . Merci pour toute info pouvant aider .

 

# - 1 - protection du fichier config.sys

<files config.sys>
  order allow,deny
  deny from all
</files>

# - 2 - empêche l’exploration des répertoires

         Options All -Indexes

# - 3 -  arrêter le hotlinking
        RewriteEngine On
        RewriteCond %{HTTP_REFERER} !^$

        RewriteRule .(gif|jpg)$ http://www.monsite.com/hotlink.gif [R,L]

# 4--   Restreindre l'accès au repertoire admin de prestashop à une adresse ip

                       order deny,allow
                       allow from 192.168.5.1
                       deny from all

# 5 --- Protéger le fichier .htaccess lui même

                <Files .htaccess>
               order allow,deny
               deny from all
                </Files>        
        
#  6 --  INTERDIRE l'ACCES AUX FICHIERS ci-dessous

         <Files ~ "^.*\.([Hh][Tt][Aa])">
          order allow,deny
           deny from all
           satisfy all
          </Files>
         <FilesMatch "\.(inc|tpl|h|ihtml|sql|ini|conf|class|bin|spd|themes|modules|exe|asa|bak|old)$">
         deny from all
         </FilesMatch>

  # 7-- PRÉVENTION DES ATTAQUES DDOS  

           LimitRequestBody 10240000


  # 8  Empêche la mise sous frames (clickjacking)

     Header always append X-Frame-Options SAMEORIGIN


 #  9  Désactivation du "MIME sniffing"

      Header set X-Content-Type-Options "nosniff"

Edited by theolan_22 (see edit history)
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...