documentroot = /htdocs. Problem is i want to block a directory within

[ForumKid]

HI,
my documentroot is "/htdocs"
Everything is cool.
Within htdocs i have three directories(mypages, _mypages, searching).


I want to allow access to just these:
/htdocs/index.jsp
/htdocs/mypages
/htdocs/searching

I dont want anyone to have access to /htdocs/_mypages.

FYI - jsp pages automatically create the _mypages directory. I dont want anyone playing with the URL and seeing these pages.

For example. If i have the page /mypages/login.jsp, someone can goto the url /_mypages/login.jsp and see all my code.

Does this make sense. Can this be done with aliases or something?

Thanks

 

[RhythmAce]

There are a couple ways to do that. You can move those directories outside of your server's "reach" but then your script may not have access to them unless authorized via ownership and permissions. The best way would be to use .htaccess to provide access to the directories via user name and password. You could give all the files in those directories chmod 777 permissions if you wanted and nobody would be able to access them without the right user name and password.

 

[ifincham]

Hi,

Another way would be to use mod_rewrite. For example something like this :

RewriteEngine on
RewriteRule ^/_mypages/(.*)

http://www.disney.com

[L]

See -->

http://httpd.apache.org/docs/mod/mod_rewrite.html

.

You have to do the usual type of thing in httpd.conf with apache modules to activate mod_rewrite, i.e. :

LoadModule rewrite_module modules/mod_rewrite.so

AddModule mod_rewrite.c

Hope this helps

 

[ForumKid]

You guys RULE!!!!!!!!!!!!!
I used the modrewrite and within seconds everything is great.

I owe you boys

THanks so much