Apache file / directory access

[graeme1972]

Hello

I know this should be in German but if anybody is kind enough to respond it would be very much appreciated

Please tell me how to go about restricting web user access to only html and php files?

For example users should not be allowed to access directories or the database password file, heaven forbid :-O
So you know the files that I wish to excl. from the users view have an extension of .inc or .lib for example.

Thanks for a great forum
Graeme

[graeme1972]

Hi all

Here is the solution:

Hope this helps
Graeme

In ./etc/http.conf change to this:

1)

<Directory />
#Options FollowSymLinks
#AllowOverride None
#XAMPP
Order deny,allow
Deny from all
</Directory>

2)

Then under the '<Directory "/opt/lampp/htdocs">' change to this:

# XAMPP
#Options Indexes FollowSymLinks ExecCGI Includes
Options -Indexes

3)
Include whichever files you wish to excl. In my case I added the "|.inc" bit.

<FilesMatch "^\.ht|.inc">
Order allow,deny
Deny from all
</FilesMatch>