How to block access to certain file types using .htaccess

linuxIt’s a good practice to block visitor access to file types that is not being used in web server. You can configure .htaccess to block access to specific file types (eg: inc, bak, log, sh). It’s common for webmaster to edit files at the server and rename the old filename to .bak. If your file contain sensitive information like login credentials, then your info will be expose to public.

To block access to certain file types using .htaccess, follow the steps below:


  • Open your .htaccess file
  • Copy and append the following code to your .htaccess:-
    Order allow,deny
    Deny from all

    * The method show above only block access to 1 file type (.inc) at a time

    If you want to block access to multiple file types at once, use the code below:-

    Order Allow,Deny
    Deny from all

    * the code above block access to .htaccess, .htpasswd, .ini, .log, .sh, .inc and .bak file extension.

  • Save your .htaccess and try to access any a fake filename that ended with the extension listed above. You should see a “Forbidden” message

Share this with your friends:-

2 Responses to “How to block access to certain file types using .htaccess”

  1. AnasImtiaz says:

    How can i use .htaccess to block the selected extensions over my whole website i.e. in all directories? I have put .htaccess file in my website’s root folder i.e. public_html It blocks the selected extensions in the root folder fine. But not in directories that are in public_html.
    How can i fix this?

  2. Ticketmaster bot says:

    Very good stuff i found here .htaccess ,( Order allow,deny ) vey useful command i was looking for it.Thanks.

Leave a Reply