欢迎各位兄弟 发布技术文章

这里的技术是共享的

You are here

首页

.htaccess allow from one page .htaccess allow from specific page 有大用

星期四, 2017-08-10 16:03 — adminshiping1
2down votefavorite
2

i have almost 20 pages on server, but i want only a file named abc.php, which users can watch. i want if user forcefully open the other files like //example.com/some.php .htaccess shows 403 error.

<Files ~ "^(?!(changepwd|login|register|remind|securitycode|registersuggest)\.php$).*(\.php)$">
AuthName "Reserved Area"
AuthType Basic
AuthUserFile path_to/.htpasswd
AuthGroupFile path_to/.htgroup
Order Deny,allow
Require group allowed_groups  
</Files>

this is the way i am currently using, but i think there can be more elegant solutions.

  
shareimprove this question
 

2 Answers 正确答案

up vote9down voteaccepted

This .htaccess-file will only allow users to open index.php. Attempts to access any other files will result in a 403-error.

Order deny,allow
Deny from all

<Files "index.php">
    Allow from all
</Files>

If you also want to use authentication for some of the files, you may simply add the content from your current file at the end of my example.

shareimprove this answer
 
1 
i also want that all js, css files to be visible which are included in index.php – user2897690 Oct 31 '13 at 14:38
1 
Try to add something like <Files ~ "\.(js|css)$">Allow from all </Files> – Atle Oct 31 '13 at 17:20
1 
how to allow more than 1 file? like index.php and register.php? in <Files "index.php"> Allow from all </Files> – Jeroen van Langen Mar 25 '15 at 21:19
up vote1down vote

Its safest to move the files you don't want the users to access to a directory which is not in the root directory of the web server.

Like if the root directory of my site is this:

/var/www/html/my_web_site/public/index.php

I can put the non-public files in another directory like this:

/var/www/html/my_web_site/config.php
/var/www/html/my_web_site/auth.php
/var/www/html/my_web_site/db.php

And include the files like this in index.php:

include("../config.php");
include("../auth.php");
include("../db.php");

Whit this, you don't have to risk to accidentally delete or forget to copy the .htaccess file.

shareimprove this answer
 
3 
no, i don't want this. suppose i have 10 php files independent of each other. i want my client be able to only open abc.php and all rest php files shows forbidden error on connecting. – user2897690 Oct 27 '13 at 12:50
   
Do you also want the login? Or is it enough with an 403-error? – Atle Oct 27 '13 at 20:32

来自  https://stackoverflow.com/questions/19617351/allowing-only-certain-files-to-view-by-htaccess


24down votefavorite
6

How can I deny access to a complete folder and sub-folders, with the exception of one file? That file is: toon.php and resides in the same folder.

shareimprove this question
 
up vote22down vote
Order Allow,Deny
<FilesMatch "^toon\.php$">
Allow from all
</FilesMatch>

That is probably the most efficient that you can get.

shareimprove this answer
 
up vote6down vote
AuthGroupFile /dev/null
AuthName "Private Area"
AuthType Basic
AuthUserFile .htpasswd
require valid-user


<Files "toon.php">
Allow from all
Satisfy Any

</Files>

Works for me. Dont' forget to configure the .htpasswd file.

shareimprove this answer
 
   
I like this answer. Just want to add that you probably need AllowOverride AuthConfig Limit in your server config – Daniel Alder Sep 6 '14 at 10:05
up vote6down vote
Deny From All
<FilesMatch "^toon\.php$">
Allow From All
</FilesMatch>

Worked for me...

shareimprove this answer
 
2 
Is there some difference to this answer here? – AD7six Jul 24 '13 at 16:34
1 
yes, my code is more understandable =) – Georgy Spassky Oct 18 '13 at 8:31
2 
In what way =) -1 for duplicating an existing answer providing no further information. – AD7six Oct 18 '13 at 8:36
up vote4down vote

You may want to use the <Directory> and <Files> directives. You can look at the documentation here:

http://httpd.apache.org/docs/1.3/mod/core.html#directory

http://httpd.apache.org/docs/1.3/mod/core.html#files

In short, you want something like this:

<Directory /folder/without/access >
     Order Deny,Allow
     Deny from All
</Directory>

<Files "filename">
     Order Deny,Allow
     Allow from All
</Files>
shareimprove this answer
 
up vote2down vote

Add the following rule to htaccess file in root

RewriteEngine on


RewriteRule !toon\.php$ - [F]

This will deny access to all files and folders except toon.php .

shareimprove this answer
 
up vote1down vote

If, like me, you're looking for a way to have authentication on an entire site/folder except for a single file, you will find that this method is working very well:

#allows a single uri through the .htaccess password protection
SetEnvIf Request_URI "/testing_uri$" test_uri

AuthName "Restricted Area"
AuthType Basic
AuthUserFile /path/to/your/.htpasswd
AuthGroupFile /
Require valid-user

#Allow valid-user
Deny from all
Allow from env=test_uri
Satisfy any

Example taken from : this site

shareimprove this answer
 

来自 https://stackoverflow.com/questions/3407543/htaccess-deny-access-to-all-except-to-one-file


普通分类: 
apache
Powered by Drupal

友情链接

校园好文网

 www.shipingzhong.cn  个人技术网_前端_后台    备案号:苏ICP备18010659号-2