It’s a good practice to block visitor access to file types that is not being used in web server. You can configure .htaccess to block access to specific file types (eg: inc, bak, log, sh). It’s common for webmaster to edit files at the server and rename the old filename to .bak. If your file contain sensitive information like login credentials, then your info will be expose to public.
To block access to certain file types using .htaccess, follow the steps below:
Advertisements
- Open your .htaccess file
- Copy and append the following code to your .htaccess:-
Order allow,deny Deny from all * The method show above only block access to 1 file type (.inc) at a time
If you want to block access to multiple file types at once, use the code below:-
Order Allow,Deny Deny from all * the code above block access to .htaccess, .htpasswd, .ini, .log, .sh, .inc and .bak file extension.
- Save your .htaccess and try to access any a fake filename that ended with the extension listed above. You should see a “Forbidden” message
Related posts:
Avast: How to schedule boot time scan before window start?
Bootstrap 3: Responsive image align center
How to setup free Yahoo POP3 email
How to password protect your files in Windows XP?
How to remove XP Antivirus Protection?
How to disable ssh root login?
How to remove Cyber Security
How to search files by content in Mac / Linux
Share this with your friends:-
How can i use .htaccess to block the selected extensions over my whole website i.e. in all directories? I have put .htaccess file in my website’s root folder i.e. public_html It blocks the selected extensions in the root folder fine. But not in directories that are in public_html.
How can i fix this?
Very good stuff i found here .htaccess ,( Order allow,deny ) vey useful command i was looking for it.Thanks.