mod_rewrite vulnerability