apache - htaccess redirect based on query parameter value -


my application used language switching using lang.php file. url redirect english /path/to/page.php?foo=bar this:

/path/to/lang.php?lang=en-ca&uri=%2fpath%2fto%2fpage.php%3ffoo%3dbar

recently there has been changes accept lang query parameter on pages. url nicer:

/path/to/page.php?foo=bar&lang=en-ca

i'd able add .htaccess file locations have lang.php file in order keep existing url working without lang.php file. possible?

the rewriterules must relative lang.php application running on different hostnames , paths.

i took stab @ based on the answer here giving me 404:

rewritecond %{request_filename} lang.php$ rewritecond %{query_string} (?:^|&)uri=([^&]+) [nc] rewriterule lang.php - [e=lang_redir_uri:%1]  rewritecond %{request_filename} lang.php$ rewritecond %{query_string} (?:^|&)lang=([^&]+) [nc] rewriterule lang.php - [e=lang_redir_lang:%1]  rewritecond %{request_filename} lang.php$ rewriterule . %{lang_redir_uri}e [l,r=temporary]

the uri parameter may have query parameters (as in examble above), , code should not make application vulnerable open redirect vulnerability.

different cases:

  • uri query string, lang first: /foo/bar/lang.php?lang=en-ca&uri=%2ffoo%2fbar%2fpage.php%3fid%3d123 should redirect /foo/bar/page.php?id=123&lang=en-ca
  • uri without query string, lang first: /foo/bar/lang.php?lang=en-ca&uri=%2ffoo%2fbar%2fpage.php should redirect /foo/bar/page.php?lang=en-ca
  • uri query string, uri first: /foo/bar/lang.php?uri=%2ffoo%2fbar%2fpage.php%3fid%3d123&lang=en-ca should redirect /foo/bar/page.php?id=123&lang=en-ca
  • uri without query string, uri first: /foo/bar/lang.php?uri=%2ffoo%2fbar%2fpage.php&lang=en-ca should redirect /foo/bar/page.php?lang=en-ca

the order of query parameters not matter in redirect target.

update

after initial answer provided @ https://stackoverflow.com/a/45732670/404623, i've tried following .htaccess rules:

# works uri values without query strings  rewritecond %{query_string} ^(lang=[^&]+)&uri=([^&]+) [nc] rewriterule lang\.php$ /%2\?%1 [l,ne,r=temporary] rewritecond %{query_string} ^uri=([^&]+)&(lang=[^&]+) [nc] rewriterule lang\.php$ /%1\?%2 [l,ne,r=temporary]  # works uri values query strings  rewritecond %{query_string} ^(lang=[^&]+)&uri=([^&]+) [nc] rewriterule lang\.php$ /%2&%1? [l,ne,r=temporary] rewritecond %{query_string} ^uri=([^&]+)&(lang=[^&]+) [nc] rewriterule lang\.php$ /%1&%2? [l,ne,r=temporary]

you can use rule in site root .htaccess below rewriteengine on line:

rewriteengine on  # uri query string     rewritecond %{query_string}     (?:^|&)(lang=[^&]+) [nc] rewritecond %1##%{query_string} (.*)##(?:.*&)?uri=([^?]+)(?:\?|%3f)([^&]+) [nc] rewriterule lang\.php$ /%2?%1&%3 [l,ne,r=302]  # uri without query string     rewritecond %{query_string}     (?:^|&)(lang=[^&]+) [nc] rewritecond %1##%{query_string} (.*)##(?:.*&)?uri=([^?]+) [nc] rewriterule lang\.php$ /%2?%1 [l,ne,r=302]

Comments

Post a Comment

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -

here tables: create table customer ( cid int primary key, name varchar(32) ) create table ord ( oid int primary key, cid int foreign key references customer, address varchar(20) ) here's linq-to-sql statement: var aaa = c in db.customer select new { c, o = c.ord.tolist() }; and here's inexplicable query generated linq-to-sql: select [t0].[cid] [cid], [t0].[name] [name], [t1].[oid] [oid], [t1].[cid] [cid2], [t1].[address] [address], (select count(*) [dbo].[ord] [t2] [t2].[cid] = [t0].[cid]) [value] [dbo].[customer] [t0] left outer join [dbo].[ord] [t1] on [t1].[cid] = [t0].[cid] order [t0].[cid], [t1].[oid] i want understand how rid of count(*) part. it's entirely uncalled for! linq needs count(*) in order determine number of entries returned o = c.ord.tolist() .
Read more