How to block login and sign up page trough IBM HTTP Server

HCL Digital Experience Digital Experience Forum
,
1

Hello to all

I want to block login and sign up page trough IBM HTTP Server. I have tried with permanent redirect directive by using the url for Login page and works sometimes. In the case of Sign page it didn't work. This is a web site created with WCM.

Below are the used code:

Login page:

Redirect permanent /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7OJfjhYQbCBgYmTk6GjgbuTgaGBp6Whn5ufqa-hSZCZfhQx-vEowNSPrBCoP4qQkoLc0AiDdEVFADDZFY4!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ /wps/portal/

Sign up page:

Redirect permanent /wps/portal/!ut/p/z1/jZTHzqNYEIWfpR8Accl4ebEBk39MvhtEsDE5mvT0Y81qWiNNT0lnUarvLEoVcISHOOqStSySpey7pPnmEWJj8FtAIDxIgQJAvtJ48DfgAEALAgGBLAACKBfClEzGIOgHi6P_4_8P4N_-f4K4-ifg2wE5GVejwNGQLG-s7F49HmZLlj_b_tdnwcMBD08CDyv0k06jaohK8EIuD_t0EfZsbXVYKU4kprBKik6SbNpqYp6IzbPeW_cIp77RX04Z-EH3EAXK9dTxwtXRSU01Nbr7RSb3N69tOy3EogGVCYLhFcNHBptP9haK_ke5VXPvtKm8Wcc5JFY8h7GECVTMxsU9pl6FEJPJyS-YtMEf-xQ0q-xdPkrzID6rgv3QjF-7r4yoQtcGvKixydUgLOvkOAk4d90ciqHSoqSyp9snImutQwuTMQdglQ0dd5TOiwdTomeQcpl92J4UY12a3ZOkt2k-kCjLCUCU7KZUkm16swsAFeVnGVRip54KHTJTqNLvWt3l42Gc74DbsPPWeX6pdpsFa1bJnSSgx8AsT5OjnhdUrEXjq74vDdyoadISKLkye7xPCMX0cTSN9xA_hoVkcWW60wTPLU_y7AEpkRgXOdnk3BkyMuvUWYOryH7ugG9YKkEgj4DrEUzhJ9hE3C1W5yX1hWz9rUhPD6MPG_uuZVfotypww-6MuGYDIzMXP27wfuSk_plZ1Zfil5Znfn5KmlYzDqJ5kciB09Y9xUXBdFELBVuLXmRMOA2ofb2vH7rRC9dulyta_YQi21vfV_ei6gkhfXbd2I-R0FJlm2fmzM_nzjintjETu1YdIY-DoQWn38XCRtmjgs01odPBzyNqB0ofTHcD_mBOXVNTEwzIhBzAVpXGbvTy80F16tuOD3QHHldu3xEiO-oMAK_-IvnKx9sEWBqxp4zjbtz7Z6i8Qa7JHR-K2j7baizdSGslykabyHj9lHASLgtrXZVSTjgwr9SDR6T1hMRMHeLdHoL4loocp1zCVdBdF2LGlm_HkUHg8ev9BxCCcBQYn1JFHCjZk37GhdUqN0XEw_z8isFDncxV2xFXz1so2-GB2-6STvRkeMLNuP0u2xWuXqVejW_tAfjj-yjQn059aL3w1CF8OfDXXx_48zA!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9hby90aG0vT0NOL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR0M0/#Z7_00000000000000A0BR2B300IO0 /wps/portal

I got the urls from the browser.

Env:

IBM WPS 8.5
IHS 8.5.5.20

Thanks for your help

2

Hello Ismael,
please take a look to the Security Hardening Guide for HCL Digital Experience on page 8, which provides you some more information and samples. If you want to avoid that users can register them self, then I strongly suggest to disable the self-care portlet at all instead of just disabling it in the Web-Server.

When I run a own test I can see that a registration page URL look like this:

/wps/portal/!ut/p/z1/rZLdUqswFIVfpT6AzSZgoN5FqOFH5KdWLTcdhsZORgodAta-vWlHHZnTcs44J5ObTL619s7aQRl6RlmVv4l13oq6ykt1XmRkCb1F4SbFNzoAsw30dARM12FMAy2ObpkFCZkGQYQTMGY6ygb0j_Cp7wMJ8didlugYLGNIb83IGT2-vQrsBwyeOVjf0U_qf6KDevX-R5ShTLYnfXqFfpFDD8j-ZQ4DQf0ih16BbDimp0MOCrlKJszFBo4YoY6aBHMnFGLVAnwCQ1GfAPqzPAUkbkrmpoPB1844_PxNgzmoJhcqB_Mc4EWAZgeP3VaOt3XTlryV44q_t8udqFb1binbvOVo0btv-Eo0vGj_EEpevhR5w8cHVSeXGy5lvlbyqR_TBwANvOvRXPJmVDRc-a5GsisKBb10Zbn_svt22dXNq6jWB0HkOeodE0459h1K0oDcT6KpHzIb-zEOQ0YCLSZ-aNhe7FA_VPdurKqCGbsRDV3X9o5hRvb9X_-16qITq_9SLq_RosvXHdpu5mpVeyHE5Ws6TS3QN9Zx04sPgPuPHw!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1Yw/?cID=Z6_00000000000000A0BR2B300GC4&initialState=enrollment&nID=Z6_00000000000000A0BR2B300GC4

so far I know that cID and nID should always been the same, because it looks to me that these are content objects in your portal. You can verify that by doing an full xmlacess export.

For which URL calls do you notice that your current rule is still not working? Which parts of a URL get changed when it is not working?

What you can try to do in HTTP Server point of view is to write a rule to not allow URLs that contain this cID and nID information in it. By the way... On which Portal Cumulative Fix Version are you? I just tested my Portal 8.5 and 9.5 CF223 version and by default the self Care Portlet is already disabled. So far I know that was changed in one of the CFs for security reasons. If you are not on the latest CF I strongly suggest you to update.

I hope that helps
Thanks, Thorsten