T.ME/BIBIL_0DAY
CasperSecurity


Server : Apache/2
System : Linux server-15-235-50-60 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64
User : gositeme ( 1004)
PHP Version : 8.2.29
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Directory :  /home/gositeme/domains/soundstudiopro.com/private_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/gositeme/domains/soundstudiopro.com/private_html/.htaccess
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /

# BLOCK ATTACKER IP - CRITICAL SECURITY
RewriteCond %{REMOTE_ADDR} ^198\.204\.236\.234$
RewriteRule ^ - [F,L]

# BLOCK 445367 directory (was used for attacks)
RewriteCond %{REQUEST_URI} ^/445367
RewriteRule ^ - [F,L]

# Allow auth directory PHP files
RewriteCond %{REQUEST_URI} ^/auth/.*\.php$
RewriteRule ^ - [L]

# Allow API directory PHP files  
RewriteCond %{REQUEST_URI} ^/api/.*\.php$
RewriteRule ^ - [L]

# Allow utils/play_audio.php - CRITICAL for audio playback
RewriteCond %{REQUEST_URI} ^/utils/play_audio\.php
RewriteRule ^ - [L]

# ============================================
# ARTIST/USER PROFILE ROUTING
# ============================================

# Artist profile by ID: /artist/123 -> artist_profile_clean.php?id=123
RewriteRule ^artist/([0-9]+)/?$ artist_profile_clean.php?id=$1 [L,QSA]

# Track page: /track/123 -> track.php?id=123
RewriteRule ^track/([0-9]+)/?$ track.php?id=$1 [L,QSA]

# Username/Custom URL routing: /drumahon -> artist_profile_clean.php?custom_url=drumahon
# Only matches if NOT a file, NOT a directory, and looks like a username (alphanumeric + hyphens)
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !^/(api|auth|utils|admin|assets|uploads|radio|config|includes|components|js|css|lang|vendor|migrations|cron|webhooks|hls|studio|cache|database|logs|audio_files|task_results|admin_includes|artist_includes)/
RewriteCond %{REQUEST_URI} !\.php$
RewriteCond %{REQUEST_URI} !\.html$
RewriteCond %{REQUEST_URI} !\.css$
RewriteCond %{REQUEST_URI} !\.js$
RewriteCond %{REQUEST_URI} !\.ico$
RewriteCond %{REQUEST_URI} !\.png$
RewriteCond %{REQUEST_URI} !\.jpg$
RewriteCond %{REQUEST_URI} !\.gif$
RewriteCond %{REQUEST_URI} !\.svg$
RewriteCond %{REQUEST_URI} !\.woff2?$
RewriteCond %{REQUEST_URI} !\.ttf$
RewriteCond %{REQUEST_URI} !\.eot$
RewriteRule ^([a-zA-Z0-9][-a-zA-Z0-9]*)/?$ artist_profile_clean.php?custom_url=$1 [L,QSA]

# ============================================
# DEFAULT ROUTING
# ============================================

# Don't rewrite index.php itself
RewriteRule ^index\.php$ - [L]

# Don't rewrite existing files or directories
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d

# Rewrite everything else to index.php
RewriteRule . /index.php [L]
</IfModule>

CasperSecurity Mini