4
Contributors
5
Replies
22
Views
4 Years
Discussion Span
Last Post by LastMitch
0

Have you tried using 2 Files directives? One to restrict access to all *.php files and then one to allow access to only one?

<Files ~ ".php$">
Order allow,deny
Deny from all
</Files>
<Files "pass.php">
Order allow,deny
Allow from all
</Files>

0

You should also store your sensitive include files above the docroot.

0
my web directory is as follows.where do i upload the file assuming my file is in folder called upload
/home
     /etc
     /public_html------->docroot
     /public_ftp
     /temp
     /www


 Do i also have to password all the directory. what about file permissions starting from /home down to /www    
0

files above the docroot shouldn't be able to be accessed from the browser, only from same-domain files AFAIK.

0

my web directory is as follows.where do i upload the file assuming my file is in folder called upload

@mutago

It really depends on how your host server structure. Not all host server work a like. I used go-daddy I know things I do on there will not work on other host for example using apache code and compression files and etc ...

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.