deny direct access to a folder and file by htaccess

php regex apache .htaccess mod-rewrite
Imrul.H picture Imrul.H · Feb 14, 2012 · Viewed 278.6k times · Source

Here is the scenario:

  • There is a index.php file in root folder
  • some files are included in index.php which are in the includes folder.
  • 1 other file (submit.php) is in the root folder for form submit action.

I want to restrict direct user access to the files in includes folder by htaccess. also for submit.php. But include will work for index.php file. Like, if user types www.domain.com/includes/somepage.php, it will restrict it (may be redirect to a error page).

Answer

jeroen picture jeroen · Feb 14, 2012

I would just move the includes folder out of the web-root, but if you want to block direct access to the whole includes folder, you can put a .htaccess file in that folder that contains just:

deny from all

That way you cannot open any file from that folder, but you can include them in php without any problems.

Related questions

.htaccess redirect from site root to public folder, hiding "public" in URL?

Bellow is my site directory structure: htdocs/ My-Project/ public/ index.php css/ img/ js/ src/ config.php templates/ library/ I do not want any direct user access to any files inside the src directory. src contains my templating and backend …

Read More
RegExp in preg_match function returning browser error

The following function breaks with the regexp I've provided in the $pattern variable. If I change the regexp I'm fine, so I think that's the problem. I'm not seeing the problem, though, and I'm not receiving a standard PHP error …

Read More
Remove all special characters from a string

I am facing an issue with URLs, I want to be able to convert titles that could contain anything and have them stripped of all special characters so they only have letters and numbers and of course I would like …

Read More