Title: S = rules question Last modified: August 21, 2016 --- # S = rules question * Resolved [Miz.Michele](https://wordpress.org/support/users/mizmichele/) * (@mizmichele) * [12 years, 2 months ago](https://wordpress.org/support/topic/s-rules-question/) * Hey – I am still learning and am getting some “Request exceeded the limit of 10 internal redirects due to probable configuration error” codes and have been pouring through my .htacess trying to see if something is wrong and I came across something unrelated. * For the rule that’s listed below, the comments say that the rules have to be in order from highest to lowest or at least that’s why I understand from the comments. * Anyway the rules start with S=12, go down to S=3, then there’s no S=2 but there is a S=1. * Two questions * 1.)Should the S=1 be change to S=2 2.)I do not run Tim Thumb on this site so is that code needed? * Thanks, * ``` # PLUGINS/THEMES AND VARIOUS EXPLOIT FILTER SKIP RULES # IMPORTANT!!! If you add or remove a skip rule you must change S= to the new skip number # Example: If RewriteRule S=5 is deleted than change S=6 to S=5, S=7 to S=6, etc. # Adminer MySQL management tool data populate RewriteCond %{REQUEST_URI} ^/wp-content/plugins/adminer/ [NC] RewriteRule . - [S=12] # Comment Spam Pack MU Plugin - CAPTCHA images not displaying RewriteCond %{REQUEST_URI} ^/wp-content/mu-plugins/custom-anti-spam/ [NC] RewriteRule . - [S=11] # Peters Custom Anti-Spam display CAPTCHA Image RewriteCond %{REQUEST_URI} ^/wp-content/plugins/peters-custom-anti-spam-image/ [NC] RewriteRule . - [S=10] # Status Updater plugin fb connect RewriteCond %{REQUEST_URI} ^/wp-content/plugins/fb-status-updater/ [NC] RewriteRule . - [S=9] # Stream Video Player - Adding FLV Videos Blocked RewriteCond %{REQUEST_URI} ^/wp-content/plugins/stream-video-player/ [NC] RewriteRule . - [S=8] # XCloner 404 or 403 error when updating settings RewriteCond %{REQUEST_URI} ^/wp-content/plugins/xcloner-backup-and-restore/ [NC] RewriteRule . - [S=7] # BuddyPress Logout Redirect RewriteCond %{QUERY_STRING} action=logout&redirect_to=http%3A%2F%2F(.*) [NC] RewriteRule . - [S=6] # redirect_to= RewriteCond %{QUERY_STRING} redirect_to=(.*) [NC] RewriteRule . - [S=5] # Login Plugins Password Reset And Redirect 1 RewriteCond %{QUERY_STRING} action=resetpass&key=(.*) [NC] RewriteRule . - [S=4] # Login Plugins Password Reset And Redirect 2 RewriteCond %{QUERY_STRING} action=rp&key=(.*) [NC] RewriteRule . - [S=3] # TIMTHUMB FORBID RFI and MISC FILE SKIP/BYPASS RULE # Only Allow Internal File Requests From Your Website # To Allow Additional Websites Access to a File Use [OR] as shown below. # RewriteCond %{HTTP_REFERER} ^.*YourWebsite.com.* [OR] # RewriteCond %{HTTP_REFERER} ^.*AnotherWebsite.com.* RewriteCond %{QUERY_STRING} ^.*(http|https|ftp)(%3A|:)(%2F|/)(%2F|/)(w){0,3}.?(blogger|picasa|blogspot|tsunami|petapolitik|photobucket|imgur|imageshack|wordpress\.com|img\.youtube|tinypic\.com|upload\.wikimedia|kkc|start-thegame).*$ [NC,OR] RewriteCond %{THE_REQUEST} ^.*(http|https|ftp)(%3A|:)(%2F|/)(%2F|/)(w){0,3}.?(blogger|picasa|blogspot|tsunami|petapolitik|photobucket|imgur|imageshack|wordpress\.com|img\.youtube|tinypic\.com|upload\.wikimedia|kkc|start-thegame).*$ [NC] RewriteRule .* index.php [F,L] RewriteCond %{REQUEST_URI} (timthumb\.php|phpthumb\.php|thumb\.php|thumbs\.php) [NC] RewriteCond %{HTTP_REFERER} ^.*lasvegasworldnews.com.* RewriteRule . - [S=1] ``` * [https://wordpress.org/plugins/bulletproof-security/](https://wordpress.org/plugins/bulletproof-security/) Viewing 2 replies - 1 through 2 (of 2 total) * Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/) * (@aitpro) * [12 years, 2 months ago](https://wordpress.org/support/topic/s-rules-question/#post-4747773) * RewriteRule . – [S=3] is skipping 3 RewriteRules. For all the other Skip rules above S=3 there is only 1 RewriteRule to Skip so they descend incrementally by 1. * 1.`RewriteRule .* index.php [F,L]` 2. `RewriteRule . - [S=1]` 3. `RewriteRule./ index.php [L]` * **Request exceeded the limit of 10 internal redirects due to probable configuration error Forum Topics** [http://forum.ait-pro.com/forums/topic/infinite-loops-request-exceeded-the-limit-of-10-internal-redirects-due-to-probable-configuration-error/](http://forum.ait-pro.com/forums/topic/infinite-loops-request-exceeded-the-limit-of-10-internal-redirects-due-to-probable-configuration-error/) * [http://forum.ait-pro.com/forums/topic/request-exceeded-the-limit-of-10-internal-redirects/#post-1430](http://forum.ait-pro.com/forums/topic/request-exceeded-the-limit-of-10-internal-redirects/#post-1430) * Thread Starter [Miz.Michele](https://wordpress.org/support/users/mizmichele/) * (@mizmichele) * [12 years, 2 months ago](https://wordpress.org/support/topic/s-rules-question/#post-4747784) * Now I get in. Thanks. I read one of the links and will check out the other. Thanks. Viewing 2 replies - 1 through 2 (of 2 total) The topic ‘S = rules question’ is closed to new replies. * ![](https://ps.w.org/bulletproof-security/assets/icon-128x128.png?rev=1731938) * [BulletProof Security](https://wordpress.org/plugins/bulletproof-security/) * [Support Threads](https://wordpress.org/support/plugin/bulletproof-security/) * [Active Topics](https://wordpress.org/support/plugin/bulletproof-security/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/bulletproof-security/unresolved/) * [Reviews](https://wordpress.org/support/plugin/bulletproof-security/reviews/) * 2 replies * 2 participants * Last reply from: [Miz.Michele](https://wordpress.org/support/users/mizmichele/) * Last activity: [12 years, 2 months ago](https://wordpress.org/support/topic/s-rules-question/#post-4747784) * Status: resolved