duanfei8149
duanfei8149
2015-09-26 20:08

如何使用.htaccess文件限制PHP文件访问？

已采纳

Here is my .htaccess file 

Options -MultiViews
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ index.php?r=$1 [QSA,L]

My base folder contains one "index.php" file and "app" folder and the app folder contains some php files and i don't want to direct access these php files inside app folder using browser.

  • 点赞
  • 写回答
  • 关注问题
  • 收藏
  • 复制链接分享
  • 邀请回答

1条回答

  • dongzhuo8210 dongzhuo8210 6年前

    As worked out in the comments to your question your requirements are actually a little more complex than what you wrote in your question.

    I guess this is what you are actually looking for: 

    RewriteEngine On
RewriteCond %{REQUEST_FILENAME} \.php$
RewriteRule ^(.*)$ index.php?r=$1 [QSA,L]

    This will rewrite requests to index.php when the file name in the request ends in the .php file name extension.

    点赞 评论 复制链接分享
提交

相关推荐

  • 如何使用.htaccess文件限制PHP文件访问？ php
    6年前
    回答 1 已采纳 Here is my .htaccess file Options -MultiViews RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^(.*)$ index.php?r=$1 [QSA,L] My base folder contains one "index.php" file and "app" folder and the app folder contains some php files and i don't want to direct access these php files inside app folder using browser.
  • 关于.htaccess文件的Wordpress攻击 php
    5年前
    回答 2 已采纳 I get an Internal server error when I try to access my site. Server is actually working fine, I have access like usual in the ftp mode. For some reason I am being attacked, likely an XSS attack, that affects my .htaccess file making it look like that: lots of ##: which results to a gigantic length of that line, making the server rendering it as a length overflow and not dipsplaying the site. When I try to modify that file, it has changed the permissions, so i first need to change them and then modify it. After I have deleted all the "#" site works fine. After some time, the same thing happens. I have the latest wordpress installation, and have also installed wordfence. How can I stop this? EDIT: Server admin says it hasn't to do with the server, because there are other wordpress sites with no problem.
  • ubuntu下如何编辑.htaccess文件？请指教。 ubuntulinux
    6年前
    回答 6 已采纳 配置bugzilla时，最后一步是编辑.htaccess文件，并用#注释掉顶部的Options-Indexes 文件怎么编辑？？？ubuntu下命令是什么？
  • 用.htaccess重写php的html文件 apachephp
    6年前
    回答 2 已采纳 I need help with converting html with php . So far My code is RewriteEngine on RewriteRule ([a-z]+).html /$1.php This is working fine. but some real html pages have php scripts ,that doesnt run. how to fix this? thanks
  • .htaccess文件导致内部服务器错误 apachephp
    7年前
    回答 1 已采纳 My site url is http://localhost/Apps/index.php; it works fine without an .htaccess file, but when i add an .htaccess, I receive the following error: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error. More information about this error may be available in the server error log. My .htaccess file code is RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-l RewriteRule ^(.+)$ index.php?url=$1 [L, QSA] PHP Error log: [18-Oct-2014 10:32:34 UTC] PHP Warning: PHP Startup: Unable to load dynamic library 'c:/wamp/bin/php/php5.5.12/ext/php_ldap.dll' - The specified module could not be found. in Unknown on line 0 Apache error.log: [Sat Oct 18 06:51:11.609106 2014] [core:alert] [pid 3068:tid 960] [client ::1:3539] C:/wamp/www/Apps/.htaccess: Invalid command 'RewriteEngine', perhaps misspelled or defined by a module not included in the server configuration I am using a WAMP server. My file directory is: C:\wamp\www\Apps\index.php the Apps folder also contains a .htaccess file.
  • 将.htaccess文件和localhost变为空 apachephp
    8年前
    回答 1 已采纳 Here is my URL for my website. http://localhost/GASS-2110/alarm-system/overview.php.I wanted to remove the .php extension so that the URL become like this;http://localhost/GASS-2110/alarm-system/overview. I paste the .htaccess file in my root directory, run the localhost, and i find its empty! i dont know why is this happening and i am not sure what did i do wrong. I believed that i need to configure something which i do not know what it is.What am i suppose to do? I am a beginner so please dont be harsh with me. where should i call the .htaccess file? Here is what i put in my .htaccess file. Options +FollowSymLinks -MultiViews # Turn mod_rewrite on RewriteEngine On RewriteBase / # To externally redirect /dir/foo.php to /dir/foo RewriteCond %{THE_REQUEST} ^[A-Z]{3,}\s([^.]+)\.php [NC] RewriteRule ^ %1 [R,L,NC] ## To internally redirect /dir/foo to /dir/foo.php RewriteCond %{REQUEST_FILENAME}.php -f [NC] RewriteRule ^ %{REQUEST_URI}.php [L] p/s: sorry for my bad english
  • .htaccess文件停止使用直接URL访问pic php
    5年前
    回答 2 已采纳 I have a website in php and CodeIgniter where user upload their profile pic and profile pic is stored in folder with name pic_uid.jpg . And then my script load pic from same folder. I want to stop direct access of pic using .htaccess file. like if pic path is http://localhost/myweb/uploads/users/pic_19.jpg If some one type this direct path, he will not get access to pic but when my script call this pic he can get access and show the pic. I have tried many options but when i stop access to directory, my script also can't load pic. How to achieve this ? Thanks
  • 无法上传htaccess文件 php
    5年前
    回答 5 已采纳 I am trying to upload my new website (codeigniter project) to the server. .htaccess file is used in my project and it is working properly in localhost. Also, i can upload the file too, but after uploading, it is not working. I always need to add the 'index.php' in url. I can't see the .htaccess file and when i trying to upload it again, it is showing the message, the file is alredy exist. Do anyone know the reason?
  • 拒绝使用.htaccess访问多个.php文件？ [重复] php
    9年前
    回答 1 已采纳 This question already has an answer here: .htaccess deny access to specific files? more than one 3 answers I want to deny access to multiple PHP files in directory /all/cstl/. My .htaccess is also stored in this directory. This is my current code and it's not working. <Files "\ (config.php|function.php|include.php)"> Order allow,deny Deny from all </Files> I have tried to deny the directory and allow specific files but it denies the directory and does not allow the requested .php files. My code for this is: <Directory /> Order deny,allow Deny from all <Directory> <Files "index.php|post.php"> Order deny,allow Deny from all </Files> Please give me some example of blocking access to multiple specific files within a directory.
  • .htaccess文件中的错误 php
    5年前
    回答 1 已采纳 I'm new to this website thing. I wrote a .htaccess file and enabled the mod_rewrite. But still i get the same error in my error.log file. This error is on my live website but not when i run it locally on my PC. Anyone please help. .htaccess file live website directory This is my error.log i have done the "sudo a2enmod rewrite" . and mod rewrite isinstalled.
  • MySQL使用PHP从2个具有相同ID的表中加入 phpmysql
    3年前
    回答 2 已采纳 I got a table like: product id | product_id 1 55 2 56 3 57 product_options id | product_id | options_value 1 55 88 2 55 87 3 55 89 ... ... I want to select all option_values from product_options where product_id from product is same with product_id from product_options. After I select all fields from product I use this: $sql .= " LEFT JOIN " . DB_PREFIX . "product_option_value ovi ON (ovi.product_id=p.product_id)"; if(...){ $sql .= " AND ovi.option_value_id='$value'"; } The problem is: If I only got one options_value, it's fine. but when I have 2 or more options_values the result is 0. i want to select all options_value from product_options for all product_id from product_options PS. Sorry for my english and explication
  • 把foreach放到array / php中 symfonyphp
    3年前
    回答 1 已采纳 With my symfony command, I want to display an array of multiple data. How to fill the fields of my table in an automatic way as I tried to do in my example? $table = new Table($output); $table->setHeaders(array('ID', 'Date')) ->setRows(array( foreach ($productsCursor as $product) { array($product->getId(), $product->getCreated()->format('Y-m-d H:i:s')), } )); $table->render();
  • .htaccess 文件不工作_文件上传漏洞详解
    4月前
    rwwwwwwww的博客 文件上传漏洞详解前言刷完了upload-labs对文件上传漏洞有了些许认识在此做个小结与记录1、文件上传漏洞概述文件上传漏洞是指由于程序员未对上传的文件进行严格的验证和过滤，而导致的用户可以越过其本身权限向服务器...
  • .htaccess文件去掉.html后缀_文件上传绕过
    4月前
    玄铁匠的博客 概述：文件上传漏洞是指用户上传了一个可执行的脚本文件，并通过此脚本文件获得了执行服务器端命令的能力。文件上传这个功能本身没有问题，有问题的是文件上传后，服务器怎么处理、解释文件。如果服务器的处理逻辑...
  • 文件上传漏洞之.htaccess
    1年前
    欧阳大仙萌萌哒的博客 0x00 前言 ...作为用户，所能使用的命令将受到限制。管理员可以通过Apache的AllowOverride指令来设置。 概述来说，htaccess文件是Apache服务器中的一个配置文件，它负责相关目录下的网页配置。通过htacce...
  • 添加.htaccess文件限制目录的访问权限来增强目录的安全性
    3年前
    北方的刀郎的博客 添加.htaccess文件限制目录的访问权限来增强目录的安全性 增强网站目录的安全性对于系统的安全非常有必要，如果一些目录不想对外开放，可以在该目录下面添加一些控制文件来限制目录的访问权限。比如，图片目录下不 ...
  • .htaccess 文件不工作_Apache配置文件详细说明（仅学习）
    4月前
    weixin_39719101的博客 本文链接：https://blog.csdn.net/tellmewhyto/article/details/81225937一、背景最近想用php写一个数据展示的小项目用于平时的工作，然后就想使用集成环境phpstudy（自己懒，嫌配置apache、mysql、php有点麻烦），...
  • .htaccess文件去掉.html后缀_文件上传和解析漏洞的整理
    4月前
    网易《了不起的中国制造》的博客 简述自己学习，文件上传&解析漏洞的整理，大佬绕过免责声明...那么木马可以干嘛，木马可以获取服务器的绝对权限，webshell，所以若网站有文件上传的功能，对用户所上传的文件做限制必须要谨慎谨慎再谨慎的文件上...
  • .htaccess 文件不工作_TP漏洞之文件上传总结
    4月前
    五个橘核的博客 查看源代码可以看到有如下代码对上传文件类型进行了限制：我们可以看到对上传文件类型进行了限制。绕过方法我们直接删除代码中onsubmit事件中关于文件上传时验证上传文件的相关代码即可。或者可以不加载所有js，还...
  • .htaccess文件说明大全
    4年前
    vonphp的博客 1.1 什么是.htaccess文件 从本指南中，首先你要判断主机支持它 这可能很难用简单的答案来回答。许多主机支持.htaccess，但实际上并不会特别声明，许多其他类型的主机有能力 但并不允许他们的用户使用. htaccess。...