Home / server / Questions / 98792
In Process
bogha
Asked: 2010-01-02 09:52:49 +0800 CST

prevent the browser from downloading doc docx and pdf

  • 772

i have some indexed document files ( .doc , .docx and .pdf ) stored in a folder in the website.

when i type the full address of the file ( ex http://www.website.com/folder1/folder2/1.doc ) the visitor or any body who is viewing the website can easily download the file.

are there any way to prevent this. are there any configuration has to be done to the .htaccess file to prevent this from happening.

also if folder2 contains only document file, how can i prevent a listing of the files inside this folder in case apache stoped running.

thank you

apache-2.2

2 Answers

  1. You have indexed document files mean, you letting crawlers to fetch your files, but you don't want people typing exact URL and downloading it.

    So, here is few examples

    Welcome for Googlebot, but when there is no referer, reject it.

    SetEnvIf User-Agent "Googlebot" welcome

SetEnvIf Referer "^$" reject

order Allow,Deny
Allow from env=welcome
Deny from env=reject

    (Note:Referer can explicitly disable in web browsers, and there is still many other ways to get the files, instead of typing exact url in browsers.)

    • 1

  2. To prevent access to some specific files, using htaccess, you can write the following:

    <files 1.doc>
 order allow,deny
 deny from all
</files>

    inside your .htaccess, that is located in the directory that contains 1.doc.

    If you want to prevent access to specific file types in general, you could use:

    <FilesMatch "\.(doc|pdf)$">
 Order Allow,Deny
 Deny from all
</FilesMatch>

    You can edit the list inside the parenthesis to fit your needs.

    For more things you could do with htaccess, see the following: http://perishablepress.com/press/2006/01/10/stupid-htaccess-tricks/

    Regarding the "how can i prevent a listing of the files inside this folder in case apache stoped running.", I'm not quite sure what you mean...if apache stops running, noone can access anything!

    • 0