Forbid access to sub directory.

d@n · - Joined: 29 Dec 2009 Posts: 1

Hello,

I am currently not having problems with my Abyss webserver consoles, i am running the X1 version of this as it suits my needs just perfectly, so thank you very much for this little compact program. :)

Recently i have forbid access to one of my directorys, example: www.******.com/images/backup
The backup directory is actually forbidden in this example

I know forbidding access to a subdirectory can be done in X1 but i have forgotten how i've done this and would like to know as i plan on buying a new system and want to move everything onto there. I'm occasionally backing everything up so i want to make sure that i know how this is done. If anybody could point me into the right direction i would be really greatful, have been trying to figure out how i've done this for quite some hours now.

Cheers,
d@n[/b]

tyklazeu · - Joined: 15 Jan 2010 Posts: 1

Same here....

any clue ? anybody?

admin · Site Admin Joined: 03 Mar 2002 Posts: 1312

d@n,

Create an IP access rule which virtual path is:

/images/backup

and where the order is deny/allow.

This rule will deny access to that directory to all visitors.

You can then create a HTML page with the text:

The backup directory is actually forbidden in this example

and declare it as your 403 custom error page.
_________________
Follow @abyssws on Twitter
Subscribe to our newsletter
_________________
Forum Administrator
Aprelium - https://aprelium.com

Axis · - Joined: 29 Sep 2003 Posts: 336

Hello d@n and Aprelium--

Wouldn't it be easier to just password protect the directory? Or am I missing something?

Regards,
Axis

admin · Site Admin Joined: 03 Mar 2002 Posts: 1312

markspenser · - Joined: 23 Jul 2009 Posts: 14

If someone will ever come to know about the protected password then it can harm the process. Rather its a good to have a single access.

DonQuichote · - Joined: 24 Dec 2006 Posts: 68 Location: The Netherlands

I think this is a design issue. Why put a private directory in a public space? You could as easily put it outside the web root. Suppose the web root is

/var/www/yoursite/htdocs/

You could easily store those images in

/var/www/yoursite/backup/images/

or even in

/home/youruser/backup/images/

Now this path is not part of the public portion of the site and can therefore never be reached by a browser. But it can be perfectly reached by your script.

gabridotns · - Joined: 15 Apr 2009 Posts: 6

same thought here DonQuichote
or if you were just backuping, why don't just tar-gziping the folder?