It’s a good practice to block visitor access to file types that is not being used in web server. You can configure .htaccess to block access to specific file types (eg: inc, bak, log, sh). It’s common for webmaster to edit files at the server and rename the old filename to .bak. If your file contain sensitive information like login credentials, then your info will be expose to public.
To block access to certain file types using .htaccess, follow the steps below:
- Open your .htaccess file
- Copy and append the following code to your .htaccess:-
Order allow,deny Deny from all
* The method show above only block access to 1 file type (.inc) at a time
If you want to block access to multiple file types at once, use the code below:-
Order Allow,Deny Deny from all
* the code above block access to .htaccess, .htpasswd, .ini, .log, .sh, .inc and .bak file extension.
- Save your .htaccess and try to access any a fake filename that ended with the extension listed above. You should see a “Forbidden” message
How to change hostname in Linux
Domain Parking - How to park a domain in CPanel Hosting
How to move cursor to end of line in vi editor
How to mount samba in Mac OS X / Linux?
Free image editor for Mac OS X / XP / Vista / Linux
How to reload .bash_profile in Linux or Mac?
Free Yahoo POP3 Email account - Yahoo Mail SG and HK
How to verify SHA-1 checksum in Mac OS X?
Share this with your friends:-
How can i use .htaccess to block the selected extensions over my whole website i.e. in all directories? I have put .htaccess file in my website’s root folder i.e. public_html It blocks the selected extensions in the root folder fine. But not in directories that are in public_html.
How can i fix this?
Very good stuff i found here .htaccess ,( Order allow,deny ) vey useful command i was looking for it.Thanks.