denying access to folders

denying access to folders

Posted by: desbrina
Posted on: 2008-12-04 09:31:00

I'm trying to deny access to certain folders. I've tried it using the Htaccess/WebDAV option in the control panel, but it seems to block access to the files even when they are called from my site, even though its set not to.

I've tried htaccess but it gives 500 Internal Server errors. I've either got the code wrong, or it doesn't work here.

In reply to:

<Directory ~ "(^|/)(cache|email_files|donations)(/|$)">
Order Deny,Allow
Deny from All
</Directory>


Anyone know how to either get the htaccess working or another way round it

Re: denying access to folders

Posted by: sdayman
Posted on: 2008-12-04 12:50:00

Once you've blocked access to a folder, a user will need a password to access *anything* in it. Putting a blank index.html file in that directory would be your best bet. That stops people from browsing that directory. Permitting access based upon a site call is weak, as someone can forge the referrer and gain access to the file.

-Scott

Re: denying access to folders

Posted by: desbrina
Posted on: 2008-12-04 13:04:00

i'm simply trying to do what i did with some files. I used htaccess to make it so that if a user went to a certain file they got a 403 error, but the website uses it fine with include/require. I'm trying to do the same thing but with directories

Re: denying access to folders

Posted by: CaydenCM
Posted on: 2009-01-09 02:48:00

Are you able to create your own .htaccess within DH WebDAV? How??
--at it seems impossible by my my section/issue http://wiki.dreamhost.com/WebDAV#create_.26_edit_one.27s_own_Htaccess_.26_.password_files_.28on_Dreamhost_WebDAV.29

Tags: internal server errorsfoldersreplycontrol panel