Link to home
Start Free TrialLog in
Avatar of totalimpact
totalimpact

asked on

Apache error 500 DirectoryIndex not allowed here

I have a few joomla sites hosted on a windows server using WAMP apache, now when I go to any site, the page wont display, and it just shows an internal server error 500. I suspect malice, but on to solving.

the apache_error.log only shows:
[Mon Aug 08 09:49:27 2011] [alert] [client 192.168.200.11] D:/wamp/www/.htaccess: DirectoryIndex not allowed here

and the path there doesnt make sense, since I am trying to open a site at D:/wamp/www/mysite

for instance, my httpd.conf has a few sites like this (nothing in the root www dir):

           <VirtualHost *>
    ServerName www.mysite.com
    DocumentRoot d:/wamp/www/mysite
    </VirtualHost>

also attached iis the httaccess file I am using
DirectoryIndex index.php
RewriteEngine On
#RewriteBase 

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !^/index.php
RewriteCond %{REQUEST_URI} (/|\.php|\.html|\.htm|\.feed|\.pdf|\.raw|/[^.]*)$  [NC]
RewriteRule (.*) index.php
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
Options -Indexes

########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla! 
#                              
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
# 
########## End - Rewrite rules to block out some common exploits

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of Arty K
Arty K
Flag of Kazakhstan image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial