Deny ajax file access using htaccess

by

The Bad: Apache 🙁

X-Requested-With in not a standard HTTP Header.

You can’t read it in apache at all (neither by
ReWriteCond %{HTTP_X_REQUESTED_WITH}
nor by
%{HTTP:X-Requested-With}), so its impossible to check it in .htaccess or same place. 🙁

The Ugly: Script 🙁

Its just accessible in the script (eg. php), but you said you don’t want to include a php file in all of your scripts because of number of files.

The Good: auto_prepend_file 🙂

  • But … there’s a simple trick to solve it 🙂

auto_prepend_file specifies the name of a file that is automatically parsed before the main file. You can use it to include a “checker” script automatically.

So create a .htaccess in ajax folder

php_value auto_prepend_file check.php

and create check.php as you want:

<?
if( !@$_SERVER["HTTP_X_REQUESTED_WITH"] ){
        header('HTTP/1.1 403 Forbidden');
        exit;
}
?>

You can customize it as you want.

More Related Contents:

  1. Using .htaccess to make all .html pages to run as .php files?
  2. deny direct access to a folder and file by htaccess
  3. Server not parsing .html as PHP
  4. Seo Friendly URL results in CSS IMG and JS not working
  5. Htaccess: add/remove trailing slash from URL
  6. URL rewriting : css, js, and images not loading
  7. Disable PHP in directory (including all sub-directories) with .htaccess
  8. No input file specified
  9. Pretty URLs with .htaccess
  10. enable cors in .htaccess
  11. Yii2 htaccess – How to hide frontend/web and backend/web COMPLETELY
  12. Is it possible to redirect post data?
  13. PHP/Apache/AJAX – POST limit?
  14. .htaccess issues: No input file specified
  15. Getting a 500 Internal Server Error (require() failed opening required path) on Laravel 5+ Ubuntu 14.04
  16. How can I use .htaccess to hide .php URL extensions?
  17. Leverage browser caching for 3rd party JS
  18. Request Entity Too Large PHP
  19. Directory index forbidden by Options directive
  20. Changing the root folder via .htaccess
  21. Using PHP/Apache to restrict access to static files (html, css, img, etc)
  22. Set an environment variable in .htaccess and retrieve it in PHP
  23. How to enable gzip?
  24. How to create clean url using .htaccess
  25. Permission denied: /var/www/abc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable?
  26. How can I disable mod_security in .htaccess file?
  27. Request exceeded the limit of 10 internal redirects
  28. .htaccess Redirect non-WWW to WWW preserving URI string
  29. .htaccess – Redirect subdomain to folder
  30. jQuery Multiple Forms Submit

Leave a Comment