Poor Man’s Web Application Firewall (WAF) with Apache mod_rewrite

mod_rewrite can be used to protect against many types of XSS, XSRF, injection, HTTP verb abuse, referer link spam, image hijacking, and other things.

Here are a few articles with samples and examples of ways to use Apache mod_rewrite and .htaccess files to protect yourself.

http://perishablepress.com/press/2009/02/03/eight-ways-to-blacklist-with-apaches-mod_rewrite/

http://www.askapache.com/htaccess/mod_rewrite-tips-and-tricks.htm

http://www.askapache.com/htaccess/mod_rewrite-variables-cheatsheet.html

Of course there is always mod_security in addition to a range of commercial devices and applications.

Did you enjoy this article? Please subscribe to our our RSS feed or Security Alerts email list.