How Can I Prevent Direct File Access in a Specific Folder Using .htaccess?

Restricting Direct Folder and File Access with .htaccess

To prevent users from directly accessing files in a certain folder or directory, such as "includes" or a specific file like "submit.php," while allowing them to work correctly within your website, you can utilize the .htaccess file.

Steps for Restricting Direct Access:

1. Create a .htaccess File: Navigate to the folder or location where you want to restrict access. Create a new file named ".htaccess" without the quotes and extension.
2. Add the Deny Rule: Open the .htaccess file and include the following code:

deny from all

This line instructs the server to deny access to all files and folders within that directory.

3. Exception for Included Files: To allow includes to work properly while still restricting direct access, place the .htaccess file outside the web root. Alternatively, you can use the following code within the .htaccess file:

<FilesMatch "\.(php|html|css)$">
    Allow from all
</FilesMatch>

<FilesMatch ".*">
    deny from all
</FilesMatch>

This configuration allows all PHP, HTML, and CSS files to be accessed, while denying access to all other files.

4. Redirection to Error Page (Optional): If you wish to redirect users to a specific error page when they attempt to access restricted files, add the following code to your .htaccess file:

ErrorDocument 403 /error_page.html

This will display the "error_page.html" page when a user attempts to directly access any restricted files.

Note:

• Make sure that the .htaccess file is placed in the correct directory to properly restrict access.
• The code you include in the .htaccess file may vary depending on your server configuration and the specific requirements you have.
• Always test the changes after making any adjustments to ensure that your website continues to function correctly.

The above is the detailed content of How Can I Prevent Direct File Access in a Specific Folder Using .htaccess?. For more information, please follow other related articles on the PHP Chinese website!