Question

In my site I’ve some file used by my application where are putted the log information.
For example a log file is “access.log”, and i write in by PHP.
If a visitor go to http://www.mysite.ext/access.log , can see the file and all the information inside it.
How can I disallow this?
thanks a lot

Answer 1

Put this in your .htaccess

<FilesMatch "\.(htaccess|htpasswd|pinc|ini|phps|fla|psd|log|sh)$">
 Order Allow,Deny
 Deny from all
</FilesMatch>

Will block .log and other common files you don’t want people to access.