prevent direct URL access to php and html pages via .htaccess

Question

I know direct URL access can be prevented via .htaccess rules but I don't know much about meta-chars or escaping.

these are the files in my xammp/htdocs folder, accessed using localhost:

index.php
createScheme.php
several someother.php

I want direct access to be enabled only for index.php and createScheme.php and all others pages should be blocked against direct access.

Please help!

Possible duplicate of (htaccess) How to prevent a file from DIRECT URL ACCESS? — Chris H.
– Chris H., Commented Jul 19, 2016 at 18:19

Rohit Goyani · Accepted Answer · 2016-07-19 17:09:04Z

2

This .htaccess file will only allow users to open index.php. Attempts to access any other files will result in a 403-error.

Order deny,allow
Deny from all

<Files "index.php">
    Allow from all
</Files>

If you also want to use authentication for some of the files, you may simply add the content from your current file at the end of my example.

answered Jul 19, 2016 at 17:09

Rohit Goyani

1,25611 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1