Access denied

[asfaw]

I am using Apache 2.5 together with PHP5 and MySQL 4.1. Is there a way to prevent access to directories where I store php/css/js files?

Thank you.

asfaw

[bretticus]

Do you mean, prevent access to them from a local user on the server? Or do you mean from the Web?

I can tell you that php files are not downloadable in the sense that css or js files are. PHP files (assuming you have a block of PHP code within) are pre-parse by php and then sent to Apache. In other words, PHP code is rendered and (typically) HTML code is sent to the browser. So, it's the same as downloading an HTML page essentially.

As for the css and js pages, well, if you plan to use them in your HTML pages, the Web needs access to them. When Apache serves up an HTML page, that HTML page is read by the browser and then the browser starts grabbing image, css, and js files. It is no different from a user typing the path directly into his or her address bar.

[asfaw]

Thank you for the quick reponse. Sorry for not make my question clear. What I meant is that if the web page address of a pariticular page is www.sample/css/sample.htm I do not want the user to go to www.sample/css - i.e. if the user attempts to go to www.sample/css he/she will get access denied message.

Thank you again.

asfaw

[bretticus]

Well, the simplest method is to create a directory index page. The second easiest approach would be to turn off directory listing alltogether (remove Indexes from Options in your Apache config or .htaccess file for that directory or virtual host. This produces a 404 error.) Finally, you can do an Apache Rewrite in your config to match the URL /css/ and rerwrite the URL to point to / for example.

Other methods may exist as well, I'm sure other forum members may have great suggestions to pass along as well.

[asfaw]

Thank you very much for your response. I am new to the subject and appreciate if you can direct me to a resource that explains and provides example on the second alternative "The second easiest approach would be to turn off directory listing alltogether (remove Indexes from Options in your Apache config or .htaccess file for that directory or virtual host. This produces a 404 error.) Finally, you can do an Apache Rewrite in your config to match the URL /css/ and rerwrite the URL to point to / for example.".

Regards,

asfaw