If I configure an .htaccess like this :
RewriteEngine On
RewriteRule ^([^/]*)$ /view.php?key=$1 [L]
Which transforms
original URL http://ift.tt/1yeGsc6
rewritten URL http://www.test.com/123
Is there any mean for an attacker to find the real php file (here view.php) and directly access to it (in URL bar)? Cconsidering URL-bruteforce is not an option, nor .htaccess reading.
Thanks for your advices.
Aucun commentaire:
Enregistrer un commentaire