Using .htaccess to optimize and secure website

[ShEkhAr]

Use .htaccess file to optimize and better secure your website: the protection of critical files, upload limit, 301, custom error pages, short listing directory contents, compressed content ...
CONTENTS ENTRY INTO FILE htaccess.txt
- Htaccess file protect file

Quote:<files .htaccess>
order allow, deny
deny from all
</ files>

- Anti spam comments

Quote:RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .comments-post\.php*
RewriteCond %{HTTP_REFERER} !.*yourdomain.com.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) ^http://%{REMOTE_ADDR}/$ [R=301,L]

- Redirect 301

Quote:Redirect 301 /old.php http://www.yourdomain.com/new.php

- Create custom error page

Quote:ErrorDocument 404 /notfound.php
ErrorDocument 403 /forbidden.php
ErrorDocument 500 /error.php

UPLOAD TO SERVER htaccess.txt

Using ftp client (using ASCII mode) and rename the file.. htaccess

CHMOD .htaccess file to 644.

Thanks Regards
SheKHAR

[dio98]

Nice tutorial.
BTW I have a question about:

ErrorDocument 404 /notfound.php
ErrorDocument 403 /forbidden.php
ErrorDocument 500 /error.php

Will it get the text from the file you choose?

[f8ll]

yes it will display whatever you tell it to in those php files.

[leivanz]

Nice tutorial! But you can do this on CPanel with ease, right?

Though coding it on .httaccess can be a nice way of learning, I guess.

[roool]

top tutorial

[glock]

Great codes I will try some of them out soon

[roool]

how is that script exactly working?/ Can someone of you can tell it me in english, I don`t know php, but perhaps I would going to learn a little bit php in the summer holidays?

Code:

RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .comments-post\.php*
RewriteCond %{HTTP_REFERER} !.*yourdomain.com.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) ^http://%{REMOTE_ADDR}/$ [R=301,L]

[f8ll]

htaccess files are not php. They are basically config files for apache. Read http://httpd.apache.org/docs/current/how...ccess.html

[dmmcintyre3]

(05-11-2011 10:17 AM)ShEkhAr Wrote:  <files .htaccess>
order allow, deny
deny from all
</ files>

[/quote]

That is typically done by default but there is no real reason to use .htaccess when on a VPS. Just turn it off and add what you would put there into the vhost for your domain in the main httpd.conf

[f8ll]

Not if you are the only one using it anyway.