<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>This site is defaced!!!</TITLE>
</HEAD><BODY bgcolor="#000000" text="#FF0000">
<H1>This site is defaced!!!</H1>
<HR>
<ADDRESS><b>NeverEverNoSanity WebWorm generation 14.</b></ADDRESS>
</BODY></HTML>
Earlier today I asked if there was a mod_rewrite rule I could add to Apache's config to stop generating PHP for the Santy.A worm bots hitting my server. I did some research and came up with these directives. They are implemented and working on my server.
RewriteEngine On
RewriteCond %{QUERY_STRING} ^(.*)highlight=\%2527
RewriteRule ^.*$ - [F,L]
This works even PHPbb is not patched, but it should not be a substitute for patching
?