From 3c19560adfe33f7fb8a6be5dc7f3a30158ae44fd Mon Sep 17 00:00:00 2001
From: Julien (jvoisin) Voisin
Date: Tue, 1 Mar 2016 13:40:34 +0100
Subject: Simplify the previous commit

---
 php-malware-finder/malwares.yara | 2 +-
 php-malware-finder/tests.sh      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/php-malware-finder/malwares.yara b/php-malware-finder/malwares.yara
index edb1ffb..9ba8ff2 100644
--- a/php-malware-finder/malwares.yara
+++ b/php-malware-finder/malwares.yara
@@ -188,7 +188,7 @@ rule DodgyStrings
 {
     strings:
         $ = ".bash_history"
-        $ = /AddType\s+application\/x-httpd-php\s+\.htaccess/
+        $ = /AddType\s+application\/x-httpd-php/
         $ = ".mysql_history"
         $ = ".ssh/authorized_keys"
         $ = "/(.*)/e"  // preg_replace code execution
diff --git a/php-malware-finder/tests.sh b/php-malware-finder/tests.sh
index fe9141a..895e202 100755
--- a/php-malware-finder/tests.sh
+++ b/php-malware-finder/tests.sh
@@ -73,7 +73,7 @@ run_test artificial/dodgy.php '0x18d:$shellshock: () { :;};'
 run_test artificial/dodgy.php '0x169:$pr: preg_replace ("/\*/e'
 run_test artificial/dodgy.php '0x1e0:$user_function: call_user_func'
 run_test artificial/dodgy.php '0x1fd:$various: <!--#exec cmd='
-run_test artificial/dodgy.php '0x214:$: AddType application/x-httpd-php .htaccess'
+run_test artificial/dodgy.php '0x214:$: AddType application/x-httpd-php'
 
 run_test artificial/bypasses.php 'DodgyPhp'
 run_test artificial/bypasses.php '0x6d:$execution: call_user_func_array($_POST'
-- 
cgit v1.3