Here are 3 ways of blocking access to a PHP sendmail.php script on your Windows Server IIS webserver. This comes in handy if a websites on your webserver sends out spam and you need to block access to a script on a specific website or globally in IIS. You can use a web.config file for this purpose, and here is how.
Tag: URL Rewrite

How to add a trailing slash in Umbraco 8
This article shows you how to add a trailing slash to URL’s in Umbraco 8, using IIS URL Rewrite Module, without breaking the Umbraco backend. Forcing one particular URL avoids duplicate content, which is important for SEO.

Tips to speed up WordPress, serve gzip compressed static HTML files
Who said WordPress is slow on Windows Server IIS? Gzip compress and serve WP-Super-Cache or Cache Enabler static HTML files, to supercharge your WordPress blog. Here is how to serve gzip compressed HTML files through Windows Server IIS: create smaller, compressed, static HTML files, that are downloaded faster. This works with WP-Super-Cache and Cache Enabler on IIS!

How to install IIS URL Rewrite Module on Windows Server 2016 & IIS 10
When you start to play with Windows Server 2016 and IIS 10, you’ll get an error when you try to install the IIS URL Rewrite Module in IIS. The error “IIS version 7.0 or greater is required to install IIS URL Rewrite Module 2.” occurs because the URL Rewrite Module installer contains an invalid version check for the IIS being used. Here is how to install IIS URL Rewrite Module in IIS 10.
HackRepair.com’s Bad Bots .htaccess in web.config for IIS
Block bad bots in WIndows Server IIS using web.config. Learn to protect your WordPress website with this web.config file!
IIS URL Rewrite “Rewrite Module error: Expression contains a repeat expression”
The other day, I had to migrate a website from a Linux/Apache web server to Windows Server IIS. The website in question had a lot of sub domains, all pointing to folders within the web root using that same name. For this to happen we usually use an IIS URL Rewrite Module rule for one sub domain in a web.config file. However, this would mean I had to add and use that same rule some fifty times… Not good! This post describes how I simplified IIS URL Rewrite Module rewrites and used the value of the first condition as input for the second rewrite condition.
RewriteProxy with .htaccess in IIS
Rewrite and proxy HTTP requests in IIS using a .htaccess. In my case scenario, I had to proxy requests in IIS, because a website was moved from web server A to B, and the DNS wasn’t updated yet. All HTTP requests for the moved website are handled in IIS’ Default Web Site; that’s the wildcard host, and the original host no longer existed there. We needed to match our website and proxy those requests to the new IIS web server. This can either be done using a proxy with IIS URL Rewrite, IIS Application Request Routing (ARR), or a .htaccess file handled by Helicon Ape.

How to block BaiduSpider bot User-Agent?
The Baidu spider (BaiduSpider user agent) can be a real pain to block, especially since it does not respect a robots.txt as it should. This post shows you how to block Baidu Spider bot, using IIS URL Rewrite Module based on its User-Agent string.

How to enable HTTP Strict-Transport-Security (HSTS) on IIS
Set up and enable HTTP Strict-Transport-Security (HSTS) in Windows Server IIS 10 web servers. And here is more technical information about HSTS in IIS, headers and web security…

Redirect HTTP to HTTPS
In this post I provide you various HTTP to HTTPS redirection methods, for Windows Server IIS and Linux Apache. In web.config and .htaccess. Use these examples to your advantage to secure the traffic between your visitors and your website.

Remove IIS Server version HTTP Response Header
Remove HTTP response headers in Windows Server IIS 10 and ASP.NET because Windows Server IIS loves to tell the world that a website runs on IIS. It does so with the Server header in the HTTP response. Here is how w to remove Server and other HTTP response headers in Windows Server IIS and ASP.NET. Using web.config files. You don’t want to give hackers too much information about your servers, heh? ;-)
How to hide the .php file extension with IIS URL Rewrite Module
Sometimes it’s important to remove -or hide- the file extension of scripts you use. Security by obscurity might be that reason, if you don’t want others to know what script language you are using for your website, or for static site hosts. This example will hide the .php extension using IIS URL Rewrite Module, in a ready to use web.config & .htaccess example: extension less URLs in IIS.

IIS Outbound Rules with gzip compression
Learn how to use URL Rewrite Outbound Rules in IIS, to offload content from a different server or host name. This way IIS with URL Rewrite acts as a reverse proxy. Add gzip compression to the mix, and this will improve website performance. In this post, I’ll also show you how to fix the URL Rewrite Module error “Outbound rewrite rules cannot be applied when the content of the HTTP response is encoded (“gzip”).” in IIS.
Create your own CDN using IIS Outbound Rules
Here’s how to create a Content Delivery Network (CDN) using IIS outbound rewrite rules. Offload your static content and speed up your website with these tips. Offloading content is important for the performance of your website, because then content is downloaded in parallel and thus faster. A faster website attracts more visitors, is more user friendly, improves CTR and Google SEO.
WordPress 3.5 on IIS 8.0 is unable to save a web.config file
WordPress 3.5 on IIS 8.0 is unable to save a web.config file because of a hard IIS version check in wp-includes/vars.php. Quick fix available here.