FM / monstra

/var/softaculous/monstra

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
update/	-	0755	rm
.htaccess	2218	0644	edit dl rm
changelog.txt	4784	0644	edit dl rm
edit.php	3618	0644	edit dl rm
edit.xml	433	0644	edit dl rm
fileindex.php	182	0644	edit dl rm
import.php	2738	0644	edit dl rm
info.xml	2141	0644	edit dl rm
install.js	924	0644	edit dl rm
install.php	6880	0644	edit dl rm
install.xml	766	0644	edit dl rm
md5	1139	0644	edit dl rm
notes.txt	493	0644	edit dl rm
options.table.xml	1911	0644	edit dl rm
upgrade.php	3452	0644	edit dl rm
upgrade.xml	485	0644	edit dl rm
users.table.xml	528	0644	edit dl rm

Edit: /var/softaculous/monstra/.htaccess (2218B)

#
# This file is part of the Monstra.
#
# (c) Romanenko Sergey / Awilum <awilum@msn.com>
#
# For the full copyright and license information, please view the LICENSE
# file that was distributed with this source code.
#

# Set default charset utf-8
AddDefaultCharset UTF-8

# PHP 5, Apache 1 and 2.
<IfModule mod_php5.c>
	php_flag magic_quotes_gpc                 off
	php_flag magic_quotes_sybase              off
	php_flag register_globals                 off
</IfModule>

<IfModule mod_rewrite.c>
	RewriteEngine on

## Begin - Rewrite rules to block out some common exploits.
	# If you experience problems on your site block out the operations listed below
	# This attempts to block the most common type of exploit `attempts` to Monstra
	#
	# Block out any script trying to base64_encode data within the URL.
	RewriteCond %{QUERY_STRING} base64_encode[^(]*$[^)]*$ [OR]
	# Block out any script that includes a <script> tag in URL.
	RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
	# Block out any script trying to set a PHP GLOBALS variable via URL.
	RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
	# Block out any script trying to modify a _REQUEST variable via URL.
	RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
	# Return 403 Forbidden header and show the content of the root homepage
	RewriteRule .* index.php [F]
	#
	## End - Rewrite rules to block out some common exploits.

## Begin - Rewrite rules for Monstra
	RewriteBase [[relativeurl]]/
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule ^(.*)$ index.php [QSA,L]
	## End - Rewrite rules for Monstra

## Begin - Rewrite rules for SEO improvements.
	# RewriteCond %{HTTP_HOST} ^www.example.org [NC]
 	# RewriteRule ^(.*)$ http://example.org/$1 [R=301,L]
	# Redirect 301 /index http://example.org/
	## End - Rewrite rules for SEO improvements.

</IfModule>

# Prevent visitors from viewing files directly.
<FilesMatch "(^#.*#|\.(md|txt|html|tpl|yml|yaml)|~)$">
	Order allow,deny
	Deny from all
	Satisfy All
</FilesMatch>

# Allow read files.
<Files robots.txt>
	Allow from all
</Files>

# Don't show directory listings for URLs which map to a directory.
Options -Indexes

# # This file is part of the Monstra. # # (c) Romanenko Sergey / Awilum # # For the full copyright and license information, please view the LICENSE # file that was distributed with this source code. # # Set default charset utf-8 AddDefaultCharset UTF-8 # PHP 5, Apache 1 and 2. php_flag magic_quotes_gpc off php_flag magic_quotes_sybase off php_flag register_globals off RewriteEngine on ## Begin - Rewrite rules to block out some common exploits. # If you experience problems on your site block out the operations listed below # This attempts to block the most common type of exploit `attempts` to Monstra # # Block out any script trying to base64_encode data within the URL. RewriteCond %{QUERY_STRING} base64_encode[^(]*$[^)]*$ [OR] # Block out any script that includes a