拒绝除带有htaccess的POST以外的所有方法

Question

I am writing rest api application in php and I want to deny access to my host all methods except Post. POST method should work only, others should throw Access denied error. How do I do that with. htaccess?

Answer 1

You can use apache's LimitExcept Directive to allow or deny requests

Restrict access controls to all HTTP methods except the named ones

<LimitExcept POST>
 order deny,allow
 deny from all
</LimitExcept>

Answer 2

尝试在开始时将其添加到.htaccess

Header add Access-Control-Allow-Methods "POST"

Answer 3

You can use mod-rewrite to allow only POST requests.

At the top of your htaccess ,put the following rule:

RewriteEngine on

#if Request method isn't "POST"
RewriteCond %{REQUEST_METHOD} !POST
#redirect the request to 403 error
RewriteRule .* - [R=403,L]