.htaccess文件扩展名卸载代码中断网站表单

时间:2013-12-20 21:00:36

标签: javascript php apache .htaccess mod-rewrite

所以我在我的HTACCESS中有这个代码很棒,因为如果访问者进入带有.php文件扩展名的页面,它会首先从我的页面中删除.php文件扩展名,然后它允许页面加载而没有扩展名。 (所以它只是把URL搞定了)

# REMOVE FILE EXTENSIONS
RewriteEngine On

# browser requests PHP
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /([^\ ]+)\.php
RewriteRule ^/?(.*)\.php$ /$1 [L,R=301]

# check to see if the request is for a PHP file
RewriteCond %{REQUEST_FILENAME}\.php -f
RewriteRule ^/?(.*)$ /$1.php [L]

它运行良好,但后来我在页面遇到问题:http://www.CyberBytesInc.com/contact因为我有一个调用.php文件发送的表单:

<form id="request-form" action="resources/script/question-send.php" method="post">

上面的htaccess代码删除了这个文件的.php,我收到错误代码“不允许直接访问此页面”。

是脚本内部的内容
} else {
    die('Direct access to this page is not allowed.');
}

一旦我从htaccess删除它,然后它开始工作:

# browser requests PHP
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /([^\ ]+)\.php
RewriteRule ^/?(.*)\.php$ /$1 [L,R=301]

但是,如果将.php放在页面的末尾(我的大部分内容都是使用文件扩展名索引并且我正在尝试删除它,那么我就不会获得删除文件扩展名的好处。) / p>

我想如果我能以某种方式使htaccess代码工作,除了从我的/ resources / scripts /文件夹访问文件时,我不知道解决这个问题的最佳方法。

您现在可以访问该网站,看看它因此而无效。暂时我可能会删除上面提到的代码行,所以我的表单至少可以工作。因此,如果您查看该网站并且该表单正在运行,那是因为我删除了上述.htaccess,直到我弄清楚如何在那里成功使用它。

谢谢!

编辑:question-send.php的完整代码

<?php

// Get email address
$email_address = 'email@site.com';

// Ensures no one loads page and does simple spam check
if( isset($_POST['name']) && empty($_POST['spam-check']) ) {

    // Declare our $errors variable we will be using later to store any errors
    $error = '';

    // Setup our basic variables
    $input_name = strip_tags($_POST['name']); //required
    $input_email = strip_tags($_POST['email']); //required
    $input_subject = strip_tags($_POST['subject']);
    $input_message = strip_tags($_POST['message']); //required

    // We'll check and see if any of the required fields are empty
    if( strlen($input_name) < 2 ) $error['name'] = '<label for="question-name">Please enter your <b>Name</b></label>';
    if( strlen($input_message) < 5 ) $error['message'] = '<label for="question-message">Please leave a longer <b>Message</b></label>';

    // Make sure the email is valid
    if( !filter_var($input_email, FILTER_VALIDATE_EMAIL) ) $error['email'] = '<label for="question-email">Please enter a valid <b>Email Address</b></label>';

    // Set a subject & check if custom subject exist
    if( $input_subject ) $subject = "(Question) - $input_subject";
    else $subject = "(Question) - No Subject";
    // $message .= "$input_message\n";
    $message .= "\n\n---\nThis email was sent by $input_name from $input_email";

    // Now check to see if there are any errors 
    if( !$error ) {

        // No errors, send mail using conditional to ensure it was sent
        if( mail($email_address, $subject, $message, "From: $input_email") ) {
            echo '<p class="success"><b>EMAIL SENT SUCCESSFULLY.</b><br />' . "Dear $input_name, " . 'thank you for contacting CyberBytes Inc. Please allow us <b>24-48</b> hours to review your request and get back to you. If you need a response sooner, please contact us via telephone at (716) 876-1824.<br /><br /><b>Please verify that this is your correct Email Address:</b><br />' . "Email Address: <i>$input_email</i>" . '<br /><br /><span class="red"><b>PLEASE NOTE:</b></span><br /> If we do not respond to your request within a reasonable amount of time, please give us a call as there may have been an error on our end with your request.</p>';
        } else {
            echo '<p class="error">There was a problem sending your email! Please give us a call at (716) 876-1824 as there seems to be an error on our end with the form.</p>';
        }

    } else {

        // Errors were found, output all errors to the user
        $response = (isset($error['name'])) ? $error['name'] . "\n" : null;
        $response .= (isset($error['email'])) ? $error['email'] . "\n" : null;
        $response .= (isset($error['message'])) ? $error['message'] . "\n" : null;

        echo "<p class='error'>$response</p>";

    }

} else {

    die('Direct access to this page is not allowed.');

}

1 个答案:

答案 0 :(得分:2)

将您的规则更改为跳过POST请求:

# browser requests PHP
RewriteCond %{REQUEST_METHOD} !POST
RewriteCond %{THE_REQUEST} ^\s/([^\ ]+)\.php
RewriteRule ^/?(.*)\.php$ /$1 [L,R=301]