Home / server / Questions / 450781
Accepted
Oxi
Asked: 2012-11-21 03:55:15 +0800 CST

How to block a user in apache httpd server from accessing a *.php file inside a Directory, instead user should access this using Directory name

  • 772

My requirement looks Simple, But Googling Did not help me yet.
my query is
i want to Throw a 404 page to a user(Not Re-Direct to another folder or file), who is trying to Access *.php files in my website

ex: when a client asks for www.example.com/home/ i want to show the content , but when user says

www.example.com/home/index.php i want to show a 404 page.

i tried different methods, nothing worked for me, one of which tried is shown below

<Directory "C:/xampp/htdocs/*">
    <FilesMatch "^\.php">
        Order Deny,Allow
        Deny from all
        ErrorDocument 403 /test/404/
        ErrorDocument 404 /test/404/
    </FilesMatch>
</Directory>

Thanks in Advance

php

2 Answers

  1. Best Answer

    this is my .htaccess file. you can demo it out here: http://mathpdq.com/demo2 or
    http://mathpdq.com/demo2/index.php

    AddDefaultCharset UTF-8
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /demo2
    RewriteCond %{HTTP_HOST} ^mathpdq\.com
    RewriteRule ^(.*)$ http://www.mathpdq.com/demo2/$1 [R=permanent,L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)$ index.php/$1 [L]
</IfModule>
    • 0

  2. Just a basic rewrite rule, you can place this as .htaccess file in your folder or in your server config or virtual host config

    RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f

//allowed files, just remove the ! to use this rule to deny
RewriteCond %{REQUEST_URI} !.*\.(css|js|jpg|gif|png|zip|tff)

//redirect location
RewriteRule (.*) /public/www/404.php
    • 0