How to block invalid URL with query param contains extension(.alfa OR .php) on dispatcher | Community
Skip to main content
sankarr26533925
Level 3
Nov 23, 2022 8:22 AM UTC
Solved

How to block invalid URL with query param contains extension(.alfa OR .php) on dispatcher

Valid URL
/content/govt/en/us/doctor/doctor-detail.html?doctorId=ss222-001


Invalid URL going to AEM publisher.
/content/govt/en/us/doctor/doctor-detail.html?doctorId=ss222-001/ALFA_DATA/alfacgiapi/perl.alfa
/content/govt/en/us/doctor/doctor-detail.html?doctorId=ss222-001/wp-plain.php

 

How to block invalid URL with query param contains extension(.alfa OR .php) on dispatcher ? Invalid URL need to redirect to error page.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
arunpatidar
arunpatidarAccepted solution
New Participant
Nov 23, 2022 8:57 AM UTC

Hi,

You can remove those query param using apache rewrite rule

 

Example

RewriteEngine On
RewriteCond %{QUERY_STRING} ^doctorId=.*(.alfa|.php)$
RewriteCond %{REQUEST_URI} /doctor/doctor-detail\.html$
RewriteRule (.*) $0?
Arun Patidar
View reply

3 replies

arunpatidar
arunpatidarAccepted solution
New Participant
Nov 23, 2022 8:57 AM UTC

Hi,

You can remove those query param using apache rewrite rule

 

Example

RewriteEngine On
RewriteCond %{QUERY_STRING} ^doctorId=.*(.alfa|.php)$
RewriteCond %{REQUEST_URI} /doctor/doctor-detail\.html$
RewriteRule (.*) $0?
Translate
Arun Patidar
    sankarr26533925Author
    Level 3
    Nov 23, 2022 1:25 PM UTC

    Thanks @arunpatidar for your response. Multiple requests are coming from unknown ip(hacker). So We need to block the request and redirect to error page. Can we achieve it using filter section? 

    Translate
    arunpatidar
    arunpatidar
    New Participant
    Nov 23, 2022 5:55 PM UTC

    I think, for that you have to use the DDoS protection.

     

    But of you think, the query parameters are not required at backend, you can simply remove the query parameter from request propagation(example is above) so that cached page can be served.

     

    Translate
    Arun Patidar
      Terms & ConditionsAccessibility statement

      Loading footer...