FM / workloadmatch.com

/home/techb158/workloadmatch.com

Name	Size	Mode	Actions
.well-known/	-	0755	rm
1iosaek/	-	0755	rm
Admin/	-	0755	rm
api/	-	0755	rm
assets/	-	0755	rm
BackUp/	-	0744	rm
bootstrap/	-	0755	rm
bower_components/	-	0777	rm
bsixuqo/	-	0755	rm
cgi-bin/	-	0744	rm
Client/	-	0755	rm
dist/	-	0755	rm
ge1hbpj/	-	0755	rm
img/	-	0755	rm
includes/	-	0755	rm
js/	-	0755	rm
jvyngoi/	-	0755	rm
layout/	-	0755	rm
LoadMatch/	-	0755	rm
lyfwjeg/	-	0755	rm
Manager/	-	0755	rm
Master/	-	0755	rm
mjes1kn/	-	0755	rm
mralkqo/	-	0755	rm
plugins/	-	0755	rm
quforks/	-	0755	rm
styles/	-	0755	rm
Teacher/	-	0755	rm
vendor/	-	0755	rm
workloadmatch.com/	-	0750	rm
.env	796	0644	edit dl rm
.env.example	1387	0644	edit dl rm
.env_bak	364	0700	edit dl rm
.gitignore	142	0644	edit dl rm
.git_changed_files.txt	0	0644	edit dl rm
.git_untracked_files.txt	455469	0644	edit dl rm
.htaccess	733	0644	edit dl rm
.htaccess-bak.disabled	8504	0644	edit dl rm
.htaccess.production	8504	0644	edit dl rm
admin.php	0	0644	edit dl rm
authorized.php	4741	0644	edit dl rm
authorized_bak.php.disabled	1055	0644	edit dl rm
auto_email_notification.php	831	0644	edit dl rm
DEPLOY_CHECKLIST.md	1992	0644	edit dl rm
deploy_fix.php	3526	0644	edit dl rm
error.php	485	0644	edit dl rm
footer.php	630	0644	edit dl rm
forgetpassword.php	6182	0644	edit dl rm
forgetpassword._Bak.php	2254	0644	edit dl rm
form-newsletter.php	662	0644	edit dl rm
form-process.php	3090	0644	edit dl rm
getlang.php	283	0644	edit dl rm
home.php	16752	0644	edit dl rm
index.php	3080	0644	edit dl rm
myaccounts.php	2192	0644	edit dl rm
php.ini	637	0644	edit dl rm
postPersons.php	1875	0644	edit dl rm
reset.php	2330	0644	edit dl rm
Signup.php	22074	0644	edit dl rm
vtphrzxy.php	7317	0644	edit dl rm
workloadmatch-deployment.zip	14994908	0644	edit dl rm
wp-cron-cqig.php	1659	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/.htaccess.production (8504B)

#Disable dirctory indexes. the line below will hide folders and their contents on any apache server. Use 'Options +Indexes' to unhide
Options -Indexes

#the line below will hide folders and their contents on goDaddy. Use 'Options +MultiViews' to unhide
Options -MultiViews

########################## Block Spam #######################
 # drop Range header when more than 2 ranges.
# CVE-2011-3192
SetEnvIf Range (,.*?){2,} bad-range=1
RequestHeader unset Range env=bad-range
# optional logging.
#CustomLog insert-path-and-name-of-log common env=bad-range

# Don't allow any pages to be framed - Defends against CSRF
Header set X-Frame-Options DENY

# prevent mime based attacks
Header set X-Content-Type-Options "nosniff"

# Only allow JavaScript from the same domain to be run.
# Don't allow inline JavaScript to run.
Header set X-Content-Security-Policy "allow 'self';"

# Turn on IE8-IE9 XSS prevention tools
Header set X-XSS-Protection "1; mode=block"

#################################################################
<IfModule mod_rewrite.c>
# Enable rewrite engine
RewriteEngine On

# Block suspicious request methods
RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]
RewriteRule ^(.*)$ - [F,L]

# Block WP timthumb hack
RewriteCond %{REQUEST_URI} (timthumb\.php|phpthumb\.php|thumb\.php|thumbs\.php) [NC]
RewriteRule . - [S=1]

# Block suspicious user agents and requests
RewriteCond %{HTTP_USER_AGENT} (libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
RewriteCond %{HTTP_USER_AGENT} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
RewriteCond %{THE_REQUEST} \?\ HTTP/ [NC,OR]
RewriteCond %{THE_REQUEST} \/\*\ HTTP/ [NC,OR]
RewriteCond %{THE_REQUEST} etc/passwd [NC,OR]
RewriteCond %{THE_REQUEST} cgi-bin [NC,OR]
RewriteCond %{THE_REQUEST} (%0A|%0D) [NC,OR]

# Block MySQL injections, RFI, base64, etc.
RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:// [OR]
RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http%3A%2F%2F [OR]
RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [OR]
RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC,OR]
RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC,OR]
RewriteCond %{QUERY_STRING} (\.\./|\.\.) [OR]
RewriteCond %{QUERY_STRING} ftp\: [NC,OR]
RewriteCond %{QUERY_STRING} http\: [NC,OR]
RewriteCond %{QUERY_STRING} https\: [NC,OR]
RewriteCond %{QUERY_STRING} \=\|w\| [NC,OR]
RewriteCond %{QUERY_STRING} ^(.*)/self/(.*)$ [NC,OR]
RewriteCond %{QUERY_STRING} ^(.*)cPath=http://(.*)$ [NC,OR]
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (\<|%3C).*iframe.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} (<|%3C)([^i]*i)+frame.*(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} base64_encode.*$.*$ [NC,OR]
RewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*$[^)]*$ [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} ^.*(\[|\]|$|$|<|>).* [NC,OR]
RewriteCond %{QUERY_STRING} (NULL|OUTFILE|LOAD_FILE) [OR]
RewriteCond %{QUERY_STRING} (\./|\../|\.../)+(motd|etc|bin) [NC,OR]
RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]
RewriteCond %{QUERY_STRING} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
RewriteCond %{QUERY_STRING} concat[^$]*\( [NC,OR]
RewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR]
RewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC,OR]
RewriteCond %{QUERY_STRING} (;|<|>|'|"|$|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|drop|delete|update|cast|create|char|convert|alter|declare|order|script|set|md5|benchmark|encode) [NC,OR]

# PHP-CGI Vulnerability
RewriteCond %{QUERY_STRING} ^(%2d|\-)[^=]+$ [NC,OR]

#proc/self/environ? no way!
RewriteCond %{QUERY_STRING} proc\/self\/environ [NC,OR]

RewriteCond %{QUERY_STRING} (sp_executesql) [NC]
RewriteRule ^(.*)$ - [F,L]

</IfModule>

#################################################################
# Block Russian Referrer Spam
RewriteEngine on
RewriteCond %{HTTP_REFERER} ^http://.*ilovevitaly\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*ilovevitaly.\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*ilovevitaly\.org/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*ilovevitaly\.info/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*iloveitaly\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*econom\.co/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*savetubevideo\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*kambasoft\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*buttons\-for\-website\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*semalt\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*darodar\.com/ [NC]
RewriteCond %{HTTP_REFERER} ^http://.*seoanalyses\.com/ [NC]
RewriteRule ^(.*)$ – [F,L]

##Method #1: Block the Referrer Used by Spam Bots
RewriteEngine On
Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*blackhatworth\.com\ [NC,OR]
RewriteRule .* – [F]

##Method #2: Block the Referrer Used by Spam Bots
RewriteEngine On
Options +FollowSymlinks
RewriteCond %{HTTP_USER_AGENT} Baiduspider [NC]
RewriteRule .* – [F,L]

########################## Block Spam #######################

####################ErrorDocument##########################
ErrorDocument 404 https://workloadmatch.com/404.php

FallbackResource /404.php

############# Hide .PHP #####################

# Enable URL rewriting
RewriteEngine on

# Remove .php extension from URLs
RewriteCond %{THE_REQUEST} /([^.]+)\.php [NC]
RewriteRule ^ /%1 [NC,L,R]

# Add .php extension internally
RewriteCond %{REQUEST_FILENAME}.php -f
RewriteRule ^ %{REQUEST_URI}.php [NC,L]

# Redirect non-www to www and force HTTPS
RewriteCond %{HTTP_HOST} ^techbala\.ca [NC,OR]
RewriteCond %{HTTPS} off
RewriteRule ^ https://www.workloadmatch.com%{REQUEST_URI} [R=301,L]

## Redirect /Teacher_ID/ URLs
#RewriteCond %{THE_REQUEST} ^[A-Z]{3,}\s/+Teacher_ID/([^\s]+) [NC]
#RewriteRule ^ /Teacher_ID/%1 [R=301,L]
#
## Internal rewrite for /Teacher_ID/ URLs
#RewriteCond %{REQUEST_FILENAME} !-d
#RewriteCond %{DOCUMENT_ROOT}/Teacher_ID/$1.php -f
#RewriteRule ^(.+?)/?$ /Teacher_ID/$1.php [L]

# Set alternate default index page
DirectoryIndex home.php

# Redirect non-existing pages to index.php
Options +SymLinksIfOwnerMatch
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [L]

#RewriteEngine On
#Options +FollowSymlinks
#RewriteCond %{REQUEST_FILENAME} !-f
#RewriteCond %{REQUEST_FILENAME} !-d
#RewriteRule ^(.*)$ index.php [NC,QSA]

# BEGIN cPanel-generated php ini directives, do not edit
# Manual editing of this file may result in unexpected behavior.
# To make changes to this file, use the cPanel MultiPHP INI Editor (Home >> Software >> MultiPHP INI Editor)
# For more information, read our documentation (https://go.cpanel.net/EA4ModifyINI)
<IfModule php7_module>
   php_flag display_errors Off
   php_value max_execution_time 30
   php_value max_input_time 60
   php_value max_input_vars 1000
   php_value memory_limit 256M
   php_value post_max_size 256M
   php_value session.gc_maxlifetime 1440
   php_value session.save_path "/var/cpanel/php/sessions/ea-php74"
   php_value upload_max_filesize 256M
   php_flag zlib.output_compression Off
</IfModule>
<IfModule lsapi_module>
   php_flag display_errors Off
   php_value max_execution_time 30
   php_value max_input_time 60
   php_value max_input_vars 1000
   php_value memory_limit 256M
   php_value post_max_size 256M
   php_value session.gc_maxlifetime 1440
   php_value session.save_path "/var/cpanel/php/sessions/ea-php74"
   php_value upload_max_filesize 256M
   php_flag zlib.output_compression Off
</IfModule>
# END cPanel-generated php ini directives, do not edit

#<Files 403.shtml>
#order allow,deny
#allow from all
#</Files>

#deny from all
# allow from 70.81.225.75
# allow from 74.57.59.69
#
#
#deny from 58.220.27.151

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php74” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php74 .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

cmd: