Archived topic

.htaccess and TRACE/TRACK

1 reply · Started by Joe on April 4, 2016

Viewing posts 1–2 of 2

April 4, 2016 at 8:02 am #184058

Hello,

A vendor we used to evaluate our site recommended to turn off Trace/Track on our WP site.

1) Does GeneratePress theme support turning this feature off?
2) If so what is the recommended method .htaccess or in the httpd.conf files?
3) How would you see or test the affect of this?

This is what they recommended.
/var/www/html/wordpress/.htaccess
...
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
RewriteCond %{REQUEST_METHOD} ^TRACK
RewriteRule .* - [F]
....

Thank you.

April 4, 2016 at 10:01 am #184113

Hi there,

To be perfectly honest with you, I've never even heard of it.

I did a quick search and found this article (from 2009): https://perishablepress.com/disable-trace-and-track-for-better-security/

Looks like .htaccess if the most commoon method.

This archived topic is closed to new replies.

Start building better websites today.