From 1a2cb998d635eab4090ebc8bc471b15cfcc158e8 Mon Sep 17 00:00:00 2001
From: Lizandro Guarnizo <77708265+lizandrogd@users.noreply.github.com>
Date: Sat, 24 Jan 2026 08:22:08 -0500
Subject: [PATCH] Update .htaccess

---
 .htaccess | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.htaccess b/.htaccess
index 5c0b656..2aa0759 100644
--- a/.htaccess
+++ b/.htaccess
@@ -14,8 +14,8 @@ DirectoryIndex index.php index.html
     # Bloquear acceso a directorios de desarrollo y temporales
     RewriteRule ^(dev|tmp)(/|$) - [F,L]
 
-    # Bloquear llamadas sospechosas en query string
-    RewriteCond %{QUERY_STRING} (union|select|insert|delete|drop|create|update|or|and) [NC]
+    # Bloquear llamadas sospechosas en query string (buscar palabras SQL completas; evitar falsos positivos en parámetros como 'before')
+    RewriteCond %{QUERY_STRING} (^|[^A-Za-z0-9_])(union|select|insert|delete|drop|create|update|and|or)([^A-Za-z0-9_]|$) [NC]
     RewriteRule .* - [F,L]
 
     RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC]