htaccess拒绝php权限目录

Question

I have a subfolder called thepictures which I needed write access to for people who use the website feature to upload a picture.

I was wondering if there is a way I can put a htaccess file in that folder that would disallow access to html and php files and such but still allow access to gif,jpg,bmp say ?

Any help on this is great...

Answer 1

Put to the root .htaccess file : if the request URI begins with /thepictures but does not end with one of the specified extensions(jpeg, png and so on), it will be forboden.

   RewriteCond %{REQUEST_URI} ^/thepictures[NC]
   RewriteCond %{REQUEST_URI} !\.(jpe?g|png|gif)$ [NC]
   RewriteRule .* - [F,L]

Answer 2

您可以使用此规则来阻止对给定文件夹中的html或php文件的访问：

RewriteRule ^thepictures/.+?\.(php|html?)(/|$) - [F,NC]