How can I restrict access to a folder or a file to other users in htaccess?

Question

I want to restrict access to some folders and files but only when a user tries to access to it through the url, not when the website access to these files. For example restrict the folders images, javascript,... I tried in different ways but I always got error 500. Basically, I don't want external users to list my website directory and open their files, if it is possible to accomplish.

Thanks in advance

Which version of apache are you using? What have you tried? Did you research the same? — hjpotter92, Nov 03 '15 at 07:40

score 1 · Answer 1 · answered Nov 03 '15 at 13:02

1

This is pure mod_rewrite based solution:

RewriteRule ^(includes/|submit\.php) - [F,L,NC]

This will show forbidden error to use if URI contains certain paths.

answered Nov 03 '15 at 13:02

I just have to copy and paste this in the htaccess? – user2688533 Nov 03 '15 at 18:17
Read this: https://mediatemple.net/community/products/dv/204643270/using-htaccess-rewrite-rules – Nov 03 '15 at 18:18

score 0 · Answer 2 · answered Nov 03 '15 at 07:36

0

You are getting a 500 error because the container cannot be used in an htaccess file (which is essentially all inside a directory container for the directory that it's in). What you need to do is remove the container from your htaccess file, and leave the Deny from all bit:

htaccess file in your document root:

Refuse direct access to all files
Order deny,allow
Deny from all
Allow from 127.0.0.1

Then create an htaccess file in the uploads/files/, uploads/images/pages/ and uploads/images/store/ (and whatever other directories that you want to allow access to):

Allow from all

answered Nov 03 '15 at 07:36

Ernst Robert

2,037
4
25
50

1

Inserting this code in my htaccess y get the 500 internal server errorRefuse direct access to all files Order deny,allow Deny from all Allow from 127.0.0.1 – user2688533 Nov 03 '15 at 18:12
1

Can you explain a bit more the result of it? – Ernst Robert Nov 03 '15 at 18:17

score 0 · Answer 3 · answered Nov 03 '15 at 07:48

0

put .htaccess and edit with "Deny from all". That's it.

answered Nov 03 '15 at 07:48

Pankit Mehta

16
3

How can I restrict access to a folder or a file to other users in htaccess?

3 Answers3