Htaccess Block Direct access php file

Question

I have added htaccess rules to rewrite url like following...

RewriteRule ^demo/$ demo.php [L,QSA]

This is working fine for me. Now issue is i want to block url for demo.php file. Like user can access only

www.example.com/demo/ (valid)
www.example.com/demo.php (not valid and want to block this url)

Please help me do this. Thanks,

anubhava · Accepted Answer · 2016-01-18 16:26:13Z

1

You can use this rule:

RewriteCond %{THE_REQUEST} /demo\.php [NC]
RewriteRule ^ - [L,R=404]

edited Jan 18, 2016 at 16:26

answered Jan 18, 2016 at 16:19

anubhava

791k67 gold badges603 silver badges671 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Hardik Over a year ago

Thanks for your quick reply. This will redirect to 404 page?

Amit Verma Over a year ago

Anubhava, I read many of your posts where you said %{THE_REQUEST} is a secure and safe var, it doesnt loop and doesnt match the 2nd iteration of rewrite rule. but I am just curious Why does it not match the uri on second round of Rule processing?

anubhava Over a year ago

It doesn't match in 2nd iteration because THE_REQUEST remains unchanged. So even if REQUEST_URI becomes /demo.php after OP's rewrite rule, THE_REQUEST will still be /demo

Hardik Over a year ago

Anubhava there is something wrong here. after adding this rules i am not able access any file under /demo directory. it redirect me to 404

anubhava Over a year ago

This rule will only block direct requests to /demo.php, there might be other rules also.

Collectives™ on Stack Overflow

Htaccess Block Direct access php file

1 Answer 1

5 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

5 Comments

Your Answer

Sign up or log in

Post as a guest

Related