## Mod_rewrite in use. RewriteEngine On # Blocage com_ajax via Apache <Files> (plus sûr) <Files "index.php"> <If "%{QUERY_STRING} =~ /(^|&)option=com_ajax(&|$)/"> Require all denied </If> </Files> # Bloquer com_ajax dans l'administration pour toutes les langues (fr, en, ar, etc.) RewriteCond %{REQUEST_URI} ^(/(fr|en|ar))?/administrator/index.php$ RewriteCond %{QUERY_STRING} (^|&)option=com_ajax(&|$) RewriteRule .* - [F,L] # Force HTTPS RewriteCond %{HTTPS} !=on RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]