Re: [PHP] PCI compliance issue

2009-06-02 Thread Robin Vickery
2009/6/2 Skip Evans > Hey all, > > The original programmer created the following in the system's .htaccess > file: > > RewriteCond %{REQUEST_FILENAME} !-f > RewriteCond %{REQUEST_FILENAME} !-d > RewriteRule .* index.php > > ...which sends any incorrect URL to the home page, correct? It rewrites

RE: [PHP] PCI compliance issue

2009-06-02 Thread Bob McConnell
From: Skip Evans > -- > The reason why this issue is being flagged is simply that both > links should bring you to the same page but if look at the > HTTP header response (http://www.ranghart.com/cgi-bin/?D=A) it > returns a 403 forbidden even though it still takes you to th

Re: [PHP] PCI compliance issue

2009-06-02 Thread Paul M Foster
On Tue, Jun 02, 2009 at 10:01:02AM -0500, Skip Evans wrote: > Hey all, > > Some may remember my question awhile back about ensuring all > CC forms are behind https. I've always put them so, but I've > taken over maintenance on a site that did not and have since > corrected the problem. > > Now the