.htaccess to restrict access to folder

by

If you don’t have the option of actually moving the “includes” folder outside of the Document Root area, and using the include_path (i.e. you can’t get to it from web), then enter 

deny from all

in a .htaccess directory in that directory.

However, alternative is to use a DEFINES directive to only allow access to those include programs by specific authorised files. For example, put 

<?php defined('ACCESS_ALLOWED') or die('Restricted Access'); ?>

in the top of the include files, and then put 

<?php define('ACCESS_ALLOWED', 1); ?>

in the programs that are allowed to include those files.

This will prevent casual GETs to those include files from running them, and will work for any web server, not just those supporting htaccess files.

More Related Contents:

  1. Redirect non-www to www in .htaccess
  2. Deny all, allow only one IP through htaccess
  3. Password protect a specific URL
  4. How to write htaccess rewrite rule for seo friendly url
  5. symfony2 rewrite rules .htaccess app.php
  6. What exactly does the Multiviews options in .htaccess?
  7. Block all bots/crawlers/spiders for a special directory with htaccess
  8. How to remove index.php from URLs?
  9. How to get MAMP to read .htaccess files
  10. Mod Rewrite redirect URL with query string to pretty url
  11. What does $1 [QSA,L] mean in my .htaccess file?
  12. .htaccess rewrite image file to php script
  13. How can I redirect to a different domain without changing the URL in the address bar?
  14. Issue In Removing Double Or More Slashes From URL By .htaccess
  15. Best Practice: 301 Redirect HTTP to HTTPS (Standard Domain)
  16. ‘hash’ url rewrite in .htaccess
  17. .htaccess redirect all pages to the homepage on a new domain
  18. redirect all .html extensions to .php
  19. .htaccess URL redirect
  20. .htaccess redirect without changing address bar
  21. How do I write a .htaccess file to make CodeIgniters URL routing work?
  22. 301 redirect .htaccess
  23. 301 redirect from URL with query string to new domain with different query string
  24. htaccess code to remove extension AND add+force trailing slash?
  25. .htaccess redirect
  26. Using mod rewrite to change URL with username variable
  27. How to Block an IP address range using the .htaccess file
  28. Reference capture groups of multiple RewriteCond in RewriteRule
  29. Exclude folder from htaccess
  30. Using regular expression in htaccess for 301 redirects

Leave a Comment