在“拒绝所有人”之后，原始域名调用不再可访问，只允许“index.php”

Question

I've tried to avoid access files on my webspace in general. Only the index.php should be allowed. I don't want to reach this goal without using mod_rewrite. My actual code is the following:

Order Deny,Allow
Deny from all
Allow from 127.0.0.1

<Files /index.php>
    Order Allow,Deny
    Allow from all
</Files>

It works when I'm calling my website like www.example.com/index.php, but it doesn't work when I leave the index.php from the URL like www.example.com/

I thought the Apache webserver would know to use the index.php when no segment to the URL is added.

Can you help me out here to understand it and tell .htaccess to allow a raw domain-call?

Answer 1

i think you better have to use some regular expressions to solve this issue

using <FilesMatch> tag instead of <Files> tag

<FilesMatch "^(index\.php)?$">
    Order Allow,Deny
    Allow from all
</FilesMatch>