Member Avatar for veledrom

Hi,

Let's say my root: http://localhost/htaccess/index.php

I have dbconnection.php, css files, js files, inc files, class files, functions.php and image files all stored in http://localhost/htaccess/secured/ directory. I don't want anyone access these files. How can i do it?

I tried .htaccess but nothing worked apart from directory browsing (IgnoreIndex */*).

Thanks

  • 3 Contributors
  • 3 Replies
  • 85 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by somedude3488
Member Avatar for somedude3488

The best way is to not store them in a place accessible to the public. I put all of my config files ect. outside the web root.

Member Avatar for Josh Connerty

Yes probably the best way but files such as images and CSS documents JS dosument MUST MUST MUST be availbale to the public there is no way around this!

If you do however have to put them in a folder in the web root then the htaccess command "deny from all" will disallow everyone (including yourself) from viewing that folder via http, it will still be accesable via FTP.

But as I said do not put any files you link in your HTML in there PHP documents are fine because they are server side whereas your browser in my cas firefox will take those files like CSS JS and images and add it to the page.

Member Avatar for somedude3488

Yes probably the best way but files such as images and CSS documents JS dosument MUST MUST MUST be availbale to the public there is no way around this!

If you do however have to put them in a folder in the web root then the htaccess command "deny from all" will disallow everyone (including yourself) from viewing that folder via http, it will still be accesable via FTP.

But as I said do not put any files you link in your HTML in there PHP documents are fine because they are server side whereas your browser in my cas firefox will take those files like CSS JS and images and add it to the page.

I use php files to serve image/css/js files. So they don't have to be accessible to the public. I keep member audio/video files for example in a directory outside the web root so they can't be hotlinked.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.