如何防止读取原始WSGI python文件？

Question

I am using mod_wsgi with apache to serve the python application. I have a directive in the VirtualHost entry as follows WSGIScriptAlias /app /home/ubuntu/www/app.wsgi . I also have DocumentRoot /home/ubuntu/www/ . Therefore, if the user attempts to read /app.wsgi it gets the raw file. If I try to block access to it via .htaccess, the application becomes unusable. How do I fix this? Is there a way to do so without moving the file out of the DocumentRoot?

Answer 1

这远非最佳选择，但它似乎确实有效：我WSGIScriptAlias /app.wsgi /home/ubuntu/www/app.wsgi添加到VirtualHost中，以便它将在该uri上运行该应用程序而不返回原始文件。

Answer 2

You should not stick the WSGI file in the DocumentRoot directory in the first place. You have created the situation yourself. It doesn't need to be in that directory for WSGIScriptAlias to work.