apache - .htaccess deny php files from all except index -

-

i have .htaccess file following contents:

<ifmodule mod_rewrite.c>       rewriteengine on     setenv http_mod_rewrite on     rewritebase /wsproject/      options -indexes     directoryindex index.php      rewritecond %{request_filename} !-d     rewritecond %{request_filename} !-f     rewritecond %{request_filename} !-l     rewriterule ^(.+)$ index.php?url=$1 [qsa,l] </ifmodule>

i want hide users: directory structure , private files, while enable public files: *.js, *.html, *.css, *.swf, *.jpg , other stuff. want .php files accessible file system, except index.php in root dir.

i want serve request via http written (abstract) mvc url pattern like: www.domain.com/lang/controller_name/action_name/arg1/arg2/././argn, being rewritten .htaccess, , public *.html, *.js ...etc files.

while options -indexes hides file listing, not prevent undesirable request e.g.: www.domain.com/library/bootstrap.php being served. whereas deleting/commenting out rewritecond %{request_filename} !-f solve this, in case none of public .html, .css, .js ...etc files served.

i tried apply deny each php files except index.php 500-internal server error message. im doing on localhost, on windows.

any ideas?

instead of stating existing files should directed index.php, can except *.js, *.html, *.css, *.swf, *.jpg should directed index.php.

this isn't same denying, since don't give forbidden response. though in case don't give out information files exist or not, i'd argue it's better solution.

<ifmodule mod_rewrite.c>       rewriteengine on     setenv http_mod_rewrite on     rewritebase /wsproject/      options -indexes     directoryindex index.php      rewriterule \.(js|html|css|swf|jpg)(\?|$) - [qsa,l]     rewriterule ^index.php(\?|$) - [qsa,l]     rewriterule ^(.+)$ index.php?url=$1 [qsa,l] </ifmodule>

note rewriting -, means no rewriting done @ all.


Comments

Post a Comment

Popular posts from this blog

python - No exponential form of the z-axis in matplotlib-3D-plots -

-
Image
i have similar problem described in how prevent numbers being changed exponential form in python matplotlib figure : i don't want (in special case) weird scientific formatting of axis. problem different have problem @ z -axis. 2-d plots can use ax.get_yaxis().get_major_formatter().set_useoffset(false) . , there no function ax.get_zaxis() what use format z -axis same way? edit: example: from mpl_toolkits.mplot3d import axes3d import numpy np import sys import matplotlib import matplotlib.pyplot pyplot def func(xi, ti): res = 10e3 + np.cos(ti) * np.sin(xi) return res if __name__ == '__main__': timespacing = 20 timestart = 0 timeend = 1 time = np.linspace(timestart, timeend, timespacing) widthspacing = 50 widthstart = 0 widthend = 3 width = np.linspace(widthstart, widthend, widthspacing) reslist = [] matplotlib.rcparams['legend.fontsize'] = 10 fig = pyplot.figure() ax = fig.gca(projection = '3d...
Read more

php - Best Light server (Linux + Web server + Database) for Raspberry Pi -

-
i install web server database on raspberry pi (little computer). computer has 1gb ram. i want know best combination: linux distribution , web server , dbms run local server multiple users minimal latency, use php on server. , best settings performance , not have bugs (memory usage, disable plugin, disable service, etc)? i thought light debian , lighttpd server , sqlite database. solution? i think lighttpd + sqlite great choice. linux distro, debian @ centos or tiny core linux , although i'm not sure of compatibility pi. obviously, can't go wrong raspbian if want use in production , more stable performance, few more pi's , set them in cluster .
Read more

c# - "Newtonsoft.Json.JsonSerializationException unable to find constructor to use for types" error when deserializing class -

-
i developing app in xamarin android. have splash screen serialize class , pass mainactivity using intent . when try deserialize in mainactivity error message : "serializationexception unable find constructor use types" serialization : void loaddata() { currency currency = new currency(this); intent = new intent(this, typeof(mainactivity)); intent.putextra("currency", newtonsoft.json.jsonconvert.serializeobject(currency)); startactivity(intent); } deserialization : cur = newtonsoft.json.jsonconvert.deserializeobject<currency> (intent.getstringextra("currency")); // error here class constructor : public currency(context context) { thiscontext = context; } i began experiencing problem after added parameter context context constructor. has caused this? how can solve it? possible serialize/deserialize class has parameters? you need have empty constructor in currency class in order deserialize it. ...
Read more