How do you prevent direct access to a file in Apache?

Question

我想阻止用户通过其URL直接访问目录中的文件，但仍然希望能够通过include或require函数在PHP程序内使用它们。

Answer 1

It is possible to put a .php file outside of the public_html folder. For example, if your public_html folder is at /my/domain/public_html/ you could put your PHP files in /my/domain/php_files/ and still access it from scripts within the public_html folder by using absolute or relative paths, but since it is outside of the public folder it will not be accessible over the web.

Keeping files outside of the public document folder is recommended best practice for configuration files etc. for security reasons.

Answer 2

Mention the below line in your .htaccess file. It'll definitely solve your problem.

RewriteRule ^includes/ - [R=404,L,NC]

Answer 3

<Files conf.inc.php>
order allow,deny
deny from all
</Files>