How to protect .htaccess Files ?

[UKBusinessLive]

Originally Posted by tlwwolfseye

No, its is as it should be. .htaccess , no other extension. Thats why I wonder. And like i said, the other things in my .htaccess file work fine, just not the preventing to browse that file. But I will check with my hoster later.

Thanks.

WOlfseye

Remember to post back, if you fix it, i for one am interested on what the problem is, and it could help others.

[Angel-Wings]

Originally Posted by tlwwolfseye

And like i said, the other things in my .htaccess file work fine, just not the preventing to browse that file.

Did you put

<Files .htaccess>
order allow,deny
deny from all
</Files>

Inside the htaccess itself or the Webserver configuration ? The second option is the way to go.

[tlwwolfseye]

Into the .htaccess File. I am now waiting for a reply from our Hoster. Might not be there before tomorrow that I here from him. I will post here when I know whats the issues.

--------------- Added [DATE]1243319257[/DATE] at [TIME]1243319257[/TIME] ---------------

Ok, i found the issue by accident. Seems besides the

<Files .htaccess>
order allow,deny
deny from all
</Files>

I used another

<Files *>
order allow,deny



</Files>

around the actual Banned IP?s and when I removed that one and just kept the above Code to prevent browsing the .htaccess, it worked. So it seems 2x kinda similiar code isn?t appreciated by the .htaccess File.

Just a couple of minutes ago my hoster confirmed that, he says that the second <Files> setting will overwrite the first.

[GoneBushX]

I added-

<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
order allow,deny
deny from all
</FilesMatch>

:up:

[Krusty1231]

I checked mine and I could see it. I had the same issue as post #13.

It does pay to read the forums!

[nhawk]

If you can see htaccess, I'd run far, far away from your host.

htaccess should be a system level protected file. If it's not, the server's security is in major question.