Robot
/
htaccess
mirror of https://github.com/phanan/htaccess.git
2
0
Fork 0
Code Issues Releases Wiki Activity

Added commented out sections for Apache 2.4 access controls

This commit is contained in:
Mat Sumpter 2015-02-11 10:16:19 -05:00
parent a8982bfbb2
commit 5e2616f501
1 changed files with 22 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
README.md
View File

@ -132,16 +132,25 @@ RewriteRule ^([^.]+)$ $1.php [NC,L]
## Security ## Security
### Deny All Access ### Deny All Access
``` apacheconf ``` apacheconf
Deny from All ## Apache 2.2
Deny from all
## Apache 2.4
# Require all denied
``` ```
But wait, this will lock you out from your content as well! Thus introducing... But wait, this will lock you out from your content as well! Thus introducing...
### Deny All Access Except Yours ### Deny All Access Except Yours
``` apacheconf ``` apacheconf
## Apache 2.2
Order deny,allow Order deny,allow
Deny from All Deny from all
Allow from xxx.xxx.xxx.xxx Allow from xxx.xxx.xxx.xxx
## Apache 2.4
# Require all denied
# Require ip xxx.xxx.xxx.xxx
``` ```
`xxx.xxx.xxx.xxx` is your IP. If you replace the last three digits with 0/12 for example, this will specify a range of IPs within the same network, thus saving you the trouble to list all allowed IPs separately. [Source](http://speckyboy.com/2013/01/08/useful-htaccess-snippets-and-hacks/) `xxx.xxx.xxx.xxx` is your IP. If you replace the last three digits with 0/12 for example, this will specify a range of IPs within the same network, thus saving you the trouble to list all allowed IPs separately. [Source](http://speckyboy.com/2013/01/08/useful-htaccess-snippets-and-hacks/)
@ -149,10 +158,16 @@ Now of course there's a reversed version:
### Allow All Access Except Spammers' ### Allow All Access Except Spammers'
``` apacheconf ``` apacheconf
## Apache 2.2
Order deny,allow Order deny,allow
Allow from All Allow from all
Deny from xxx.xxx.xxx.xxx Deny from xxx.xxx.xxx.xxx
Deny from xxx.xxx.xxx.xxy Deny from xxx.xxx.xxx.xxy
## Apache 2.4
# Require all granted
# Require not ip xxx.xxx.xxx.xxx
# Require not ip xxx.xxx.xxx.xxy
``` ```
### Deny Access to Hidden Files and Directories ### Deny Access to Hidden Files and Directories
@ -172,9 +187,13 @@ RedirectMatch 404 /\..*$
These files may be left by some text/html editors (like Vi/Vim) and pose a great security danger, when anyone can access them. These files may be left by some text/html editors (like Vi/Vim) and pose a great security danger, when anyone can access them.
``` apacheconf ``` apacheconf
<FilesMatch "(\.(bak|config|dist|fla|inc|ini|log|psd|sh|sql|swp)|~)$"> <FilesMatch "(\.(bak|config|dist|fla|inc|ini|log|psd|sh|sql|swp)|~)$">
## Apache 2.2
Order allow,deny Order allow,deny
Deny from all Deny from all
Satisfy All Satisfy All
## Apache 2.4
# Require all denied
</FilesMatch> </FilesMatch>
``` ```
[Source](https://github.com/h5bp/server-configs-apache) [Source](https://github.com/h5bp/server-configs-apache)