Re: Tightening security on my webserver

[Frank Gingras <thumbs@xxxxxxxxxx>]

To be clear, is sobs.com.au your domain name?

On Tue, Nov 14, 2023 at 1:26 PM Murray Collingwood <murray@xxxxxxxxxxxxxxxxxxxxxx> wrote:

Hi folks

First time poster.  I recently became aware that hackers were able to include scripts in my URLs that would run (when reflected back to the client web browser).

Is there a simple configuration in Apache that allows me to apply strict rules to the URLs that would stop this happening?

Alternatively, is there something I have opened / allowed that enables this?

For example: https://sobs.com.au/ui/appwaz.php/jiwzk%22onload%3d%22alert(1)%22tyysj

Hope you can help.

Cheers

Murray

--

Murray Collingwood
Focus Computing

Australia ph 07 3175 0575

New Zealand ph 03 928 1699

http://www.focus-computing.com.au