Link to home
Start Free TrialLog in
Avatar of stuayre
stuayre

asked on

.htaccess block php scripts in sub folder

Hi,

I used to use this code to block any php or cji scripts from being run in a folder. but i want to block them in a sub folder that im giving ftp access to.

eg
folder1
  - script1.php
  - script2.php
  - script3.php
   - sub_folder1
     - textfile.csv
     - textfile.csv

I want to put something in Folder1 so that no scripts can be put in the sub_folder1.

here's the script i used to use but it had to be in the same folder. ie. it would have to go in sub_folder1 which could then be deleted by the people im giving ftp details to.

<Files ~ "\.(php|php3|php4|php5|phps|phtml|shtm|shtml|cgi|pl|pm|asp|cfm|jse|jsp|jar|py|exe|com|bat|dll|pif|scr|reg|inf|htaccess)$">order allow,deny deny from all</Files>
ASKER CERTIFIED SOLUTION
Avatar of ravenpl
ravenpl
Flag of Poland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of valain
valain

Hi

You could enter that directve directly into your main apache configuration files (which the user doesn't have access to, obviously), or you could change your .htaccess file permissions so that the user can't modify or delete that file using his FTP access (or a PHP script he'd write).