requestclassifier.ini [RuleSet-probes] #

The block [RuleSet-probes] of settings/requestclassifier.ini, with 4 setting(s).

The groups of the rule sets: [RuleSet-<identifier>]. For a set built on expRequestPatternRuleSet (the built-in
sets but threshold) these settings add to its built-in rules:
Class=<class> the class of the set (needed for an extension's set; empty: the built-in class)
Patterns[<rule>]=<regex> a rule of your own (or a built-in rule replaced: same name). PCRE without
delimiters, matched case-insensitively; no back references (\1) or named groups.
A pattern that does not compile is left out with a warning. Avoid ## (the INI
comment marker) in a pattern.
Disabled[]=<rule> a built-in rule switched off
Excludes[<name>]=<regex> a request whose path matches is never flagged by this set (probes: the decoded
namespace path); Excludes[<built-in name>]= (empty) removes a built-in exclude
Confidence[<rule>]=low|medium|high, DefaultConfidence=high
The rule names below are the built-in ones (the second part of the first token of a line).

Never edit settings/requestclassifier.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/requestclassifier.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/requestclassifier.ini.append.php for one siteaccess,
• extension/<extension>/settings/requestclassifier.ini.append.php in an extension (read when the extension is active).

Class #

Matched against the decoded namespace path. Rules: wp-login, wp-admin, wp-content, wp-includes, wp-config,
xmlrpc, env, git, vcs (.svn .hg .bzr), ds-store, hidden (.htpasswd .htaccess .aws .ssh ...), dbtool (phpMyAdmin,
pma, adminer ...), phpunit, cgi-bin, server-status, actuator, phpinfo, config-file (composer.json, *.ini ...),
exploit (hnap1, boaform ...), backup (an archive or dump at the namespace root, or with a backup-like name),
backup-copy (*.bak, *.old, *~).
Built-in excludes, never a probe: download (/content/download/...), storage (var/storage, var/<site>/storage),
public-cache (var/<site>/cache/public: packed scripts and styles), assets (stylesheets, scripts, images and fonts
under design/, extension/ and share/).
Example, a path of your own:
Patterns[old-admin]=^/administrator(/|$)

Default: empty.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-probes]
Class=
*/ ?>

Patterns #

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-probes]
# an empty "Patterns[]" first replaces the shipped list; without it the items are added
Patterns[]
*/ ?>

Disabled #

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-probes]
# an empty "Disabled[]" first replaces the shipped list; without it the items are added
Disabled[]
*/ ?>

Excludes #

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-probes]
# an empty "Excludes[]" first replaces the shipped list; without it the items are added
Excludes[]
*/ ?>

Related #

• All blocks of requestclassifier.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/requestclassifier.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.