Every website owner needs to draw up a strategy to deal with attacks such as Cross-Site Scripting, Local File Inclusion and SQL Injection which all start with transmission of hostile commands via the HTTP Request. One challenge in dealing this kind of issue is how to separate legitimate requests from those that are hostile or malicious. If the website is hosted on an Apache server, there is a powerful mechanism available to help mitigating attacks: that is the Apache .htaccess file. When properly configured, the .htaccess file on a server with mod_rewrite enabled can provide a robust defense against many HTTP Request attacks. The .htaccess file is very powerful; therefore is recommended that there bbe a full backup of your website before you start editing your .htaccess […]

Read more: https://www.todhost.com/blog/how-to-secure-your-website-from-attacks-using-the-htaccess-file.html