仅允许通过代码使用.htaccess访问文件夹

Question

I want to hide my uploads folder but i want to access it via php . Is this possible with .htaccess ? I tried something but didn't worked.

    <files "/uploads">
  order allow,deny
  deny from all
    </files>

    <folders uploads>
Order Allow,Deny
Deny from all
    </folders>

Answer 1

You're almost there, but it depends on what version of Apache you're using also.

The above method you're trying is if you want to block access to a specific file, if you want to block a folder, then add your .htaccess file to that folder and just use:

Below 2.4:

deny from all

2.4 or above:

Require all denied

Answer 2

IMPORTANT EDIT

You can just upload a .htaccess to the folder that you want to block with the following:

Deny from all

If there is some issue, add:

Allow from 127.0.0.1

It worked well for me.

Original answer

Try:

<Directory "/uploads">
    Order allow,deny
    Deny from all
    Allow from 127.0.0.1
</Directory>

EDIT:

The code above will deny all except the local ip (of your server).

As thickguru said, it also depends on your apache version. Here are some other ways to do it:

<Directory "/uploads">
    Require local
</Directory>

It will only allow if requested by the server (your script or somewhat on the server).

Or:

<Directory "/uploads">
    Require ip 127.0.0.1
</Directory>

The same as above, but using the local adress. You can also add other ips to it. All the ips that you add there will be allowed to access the folder.