.htaccess help

[veledrom]

Hi,

Let's say my root: http://localhost/htaccess/index.php

I have dbconnection.php, css files, js files, inc files, class files, functions.php and image files all stored in http://localhost/htaccess/secured/ directory. I don't want anyone access these files. How can i do it?

I tried .htaccess but nothing worked apart from directory browsing (IgnoreIndex */*).

Thanks

[somedude3488]

The best way is to not store them in a place accessible to the public. I put all of my config files ect. outside the web root.

[Josh Connerty]

Yes probably the best way but files such as images and CSS documents JS dosument MUST MUST MUST be availbale to the public there is no way around this!

If you do however have to put them in a folder in the web root then the htaccess command "deny from all" will disallow everyone (including yourself) from viewing that folder via http, it will still be accesable via FTP.

But as I said do not put any files you link in your HTML in there PHP documents are fine because they are server side whereas your browser in my cas firefox will take those files like CSS JS and images and add it to the page.

[somedude3488]

Yes probably the best way but files such as images and CSS documents JS dosument MUST MUST MUST be availbale to the public there is no way around this!

If you do however have to put them in a folder in the web root then the htaccess command "deny from all" will disallow everyone (including yourself) from viewing that folder via http, it will still be accesable via FTP.

But as I said do not put any files you link in your HTML in there PHP documents are fine because they are server side whereas your browser in my cas firefox will take those files like CSS JS and images and add it to the page.

I use php files to serve image/css/js files. So they don't have to be accessible to the public. I keep member audio/video files for example in a directory outside the web root so they can't be hotlinked.