Htaccess prevent file download

Active 11 years, 10 months ago. Viewed 9k times. Improve this question. Martinho Fernandes. Add a comment. Active Oldest Votes.

So, here is few examples Welcome for Googlebot, but when there is no referer, reject it. See here for a conversion tool. The code below limits it to 1mb. This will redirect users to a maintenance page but allow access to your IP address. Change Sometimes you want to force the browser to download some content instead of displaying it. The following snippet will help.

While many people consider this pointless especially with regards to security , if you want to stop your server from giving away server info the sever OS etc , use this:. Sometimes you want to force the browser to display some content instead of downloading it. The following snippet from alrra should make it happen. To have Apache automatically encode your content in UTF-8, use the following code.

You can also swap the utf-8 for another character set if required:. See a list of time zones here. To set it to Los Angeles time zone:. If you already have a copy of the requested file in your cache, the request never gets to your server, so it can't be blocked. Delete exisitng. Told you Iam a total noob, but thx for the replies. Your code should work either in your downloads directory or in your root home page directory.

Clear the cache before every test to get consistent results. Jim Become a Pro Member. Toggle navigation. This page requires javascript to function properly. Features Features. June 7, Table of Contents. Contents hide. How to protect your WordPress files and directories using.

Protecting the. Restrict access to the wp-admin folder using. Block unauthorized access to wp-config. Disable directory browsing in WordPress using htaccess. Blocking specific IP addresses from accessing site. Blocking specific domains from accessing your site. An alternative solution. Login to your Bluehost account. Upload the file. Posted in:. You may also like November 17, November 17, Share via. But we can't necessarily see from the code you posted the full request There's nothing in your.

This is then internally rewritten to your front-controller index. Show 3 more comments. Active Oldest Votes. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog.