Friday, June 30, 2006

Apache config, limiting some file type access on OpenBSD

Dissallow *.inc *.class from anywhere


<VirtualHost <server_ip>>
  ServerAdmin myname@mydomain
  DocumentRoot /var/www/htdocs/mydir
  ServerName myserver
  ErrorLog logs/error_log
  TransferLog logs/access_log
  <Directory "/var/www/htdocs/mydir">
    Satisfy All
    Order deny,allow
    Deny from all
    Allow from <trusted_ip>
    AuthType Basic
    AuthUserFile /var/www/htdocs/mydir/.htpasswd
    AuthName Auth_Here
    require valid-user
    <Files ~ "\.(inc|class)$*">
      Deny from all
    </Files>
  </Directory>
</VirtualHost>

No comments: