Question

My Google-fu is failing me on this one…

I’m trying to create an Apache config that will only allow access to image, js, and css files in a specific directory.

For example, the following URL should work:

mysite.com/dir/image.gif

but this should be blocked:

mysite.com/dir/page.php

The part I’m struggling with is getting it working only for /dir/. The rest of the directories outside of /dir/ shouldn’t be impacted by this directive.

This is what I have so far, which isn’t doing what I need (it seems to apply to all directories).

<FilesMatch "\.(gif|jpe?g|jpg|png|js|css)$">
  Order deny,allow
  Allow from all
</FilesMatch>

How do I only allow access to certain file types within /dir/ but not affect the rest of my directories?

Answer 1

For simplicity, when I do this I usually put all the media files in their own directory. However if this isn’t an option you might try the FilesMatch directive:

http://httpd.apache.org/docs/2.2/mod/core.html#filesmatch

You can put a FilesMatch inside a Directory.