在HTML（Wordpress）中包含HTML和PHP文件的安全HTML文件或安全文件夹

Question

i have developed a project which uses HTML files (present in a single folder) in a iframe. I have created a index.php which required login to access and inside this index.php i use index.html in a iframe. The problem is if the user call directly call index.html then it can directly see index.html. I want to restrict the users to see index.html directly . I have created this project inside wordpress and use IIS as a web server.

Answer 1

If you are under IIS 7.x, create a web.config file in your folder which you would like to restrict access and type or paste the following into it. It should look something like this:

<?xml version="1.0"?>
<configuration>
   <system.webServer>
       <security>
          <requestFiltering>
               <hiddenSegments applyToWebDAV="false">
                   <add segment="myfoldername" />
               </hiddenSegments>
           </requestFiltering>
       </security>
   </system.webServer>
</configuration>

Have a look at the following resource for more information :

http://www.iis.net/ConfigReference/system.webServer/security/requestFiltering/hiddenSegments