Forum

BanOnInvalidURL

Martijn
19 November 2013, 16:51
BanOnInvalidURL = <ban-time>
Number of seconds to ban an IP in case of an invalid URL.
Default = 0, example: BanOnInvalidURL = 60


What is for Hiawatha an invalid url?

For example:
When an user types in a url directly in the browser with a typo and a 404 is returned, does that user get's banned?

Or is a invalid url when somebody add's a lot of shit to the url?

Hiawatha version: 9.3
Operating System: Debian 7
Hugo Leisink
19 November 2013, 17:12
A URL that result in a 404, 403 or even a 500 can technically still be a valid URL. Hiawatha considers a URL invalid when it's not according to the standard. For example a URL that doesn't start with a slash (/) or one that contains a space (instead of %20). Also potentially dangerous characters make a URL invalid for Hiawatha. For example one that contains a NULL byte.
This topic has been closed.