HTTP method = “GET” Requested file type ENDS WITH ".php" Requested file type = “x-msdownload” Request MATCHES Regular Expression