.htaccess Tutorials, htaccess Examples, Sample .htaccess Files

.htaccess Tutorials and Sample .htaccess Files

.htaccess file examples and code to get you up and running. This is the index of my favorite apache HTTP (htaccess, mod_rewrite, httpd.conf) examples, solutions, ideas, htaccess tips, apache tricks and .htaccess sample files. Some of my best server tricks and htaccess configuration techniques aren’t yet here, but are on their way. I like to semi-hide the very best solutions throughout these articles so that only the hungry find it. But 99% of these .htaccess articles are full of easy to use, cut-and-paste-ready htaccess example snippets.

Note: new section on mod_security!

For Webmasters

• When site is ‘Under Construction’
• Redirect Everyone but you to alternate page on your server.
• Set the Timezone of the server
• Set the Server Administrator Email
• Turn off the ServerSignature
• Force Files to download, do not display in browser
• Process All .gif files with a cgi script
• Process Requests with certain Request Methods
• Make any file be a certain filetype
• Use IfModule directive for robust code

Custom HTTP Headers

• Prevent Caching 100%
• Remove IE imagetoolbar without meta tag
• Add Privacy (P3P) Header to your site
• Add language and charset headers without meta tags

PHP htaccess tips

• When php run as CGI
• Use a custom php.ini with mod_php or php as a cgi
  • When php run as Apache Module (mod_php)
  • When cgi php is run with wrapper (FastCGI)

301 Redirects without mod_rewrite

• For single moved file
• Redirect home to new Domain
• For multiple files - RedirectMatch
• Redirect entire site to single file
• Example Redirect code in .htaccess

mod_rewrite tips and tricks

• Check for a key in QUERY_STRING
• Removes the QUERY_STRING from the URL
• Fix for infinite loops
• Require the www
• Redirect .php files to .html files (SEO friendly)
• Redirect .html files to actual .php files (SEO friendly)
• Block access to files during certain hours of the day
• Rewrite underscores to hyphens for SEO URL
• Redirecting Wordpress Feeds to Feedburner
• Only allow GET and PUT request methods
• Prevent bandwidth theft and file, image hotlinking

Speed with .htaccess Caching

• htaccess time cheat sheet
• Caching with mod_expires + mod_headers
• htaccess Caching with mod_headers
• htaccess Caching with mod_expires

htaccess Password Protection

• Require password for single file
• Password Protect multiple files
• Allow access from 1 IP without password prompt, require password for other IP
• Example .htaccess file for password protection

Security with Apache htaccess

• CHMOD your files
• Prevent access to .htaccess and .htpasswd files
• Show Source Code instead of executing
• Securing directories: Remove ability to execute scripts
• .htaccess ErrorDocuments

SSL encryption in htaccess, HTTPS

• Redirect non-https requests to https server
• Rewrite non-https to HTTPS without mod_ssl!
• Redirect everything served on port 80 to HTTPS URI

Apache Variable fun mod_env

• Using visitor dependent environment variables:
• Special Purpose Environment Variables
• SetEnvIf

Elite .htaccess Security with MOD_SECURITY

• Laying the smack down on attacks
• mod_security + mod_rewrite
• Block Spam by examining POST form fields
• Enable mod_security - DreamHost
• Disabling mod_security conditionally per IP
• Disabling mod_security with .htaccess Authorization
  • Adding password protection for mod_security bypass
  • Magic Authorization shut-off using .htaccess
• AskApache’s MOD_SECURITY config for DreamHost
• Block WordPress Spam Forever!
• Force Any Connections to be Paused a set number of ms
• Only Allow Certain REQUEST_METHODS
• ModSecurity Debugging and Logging
  • Control mod_security logging to your error log
• Turn Off/On Logging JUST for your IP Address
• Mod_Security Directives for DreamHost
• How I got Started with mod_sec
• Example httpd.conf mod_security rule files

SetEnvIf and SetEnvIfNoCase Examples

• Unique mod_setenvif Variables
• Populates HTTP_MY_ Variables with mod_setenvif variable values
• Set REMOTE_HOST to HTTP_HOST
• Allows only if HOST Header is present in request
• Add values from HTTP Headers
• Set the REDIRECT_STATUS for Interpreter Security

.htaccess Core Directives

Here are some of the directives included in the core of apache httpd that you may utilize in .htaccess files.

Files

Container for directives affecting files matching specified patterns

Limit

Container for authentication directives when accessed using specified HTTP methods

LimitExcept

Container for authentication directives to be applied when any HTTP method other than those specified is used to access the resource

IfModule

Container for directives based on existance of specified modules

IfDefine

Container for directives based on existance of command line defines

FilesMatch

Container for directives affecting files matching specified patterns

AuthType

An HTTP authorization type (e.g., “Basic”)

AuthName

The authentication realm (e.g. “Members Only”)

Require

Selects which authenticated users or groups may access a protected space

Satisfy

access policy if both allow and require used (’all’ or ‘any’)

AddDefaultCharset

The name of the default charset to add to any Content-Type without one or ‘Off’ to disable

AcceptPathInfo

Set to on or off for PATH_INFO to be accepted by handlers, or default for the per-handler preference when AllowOverride includes FileInfo

ErrorDocument

Change responses for HTTP errors

Options

Set a number of attributes for a given directory

DefaultType

the default MIME type for untypable files

FileETag

Specify components used to construct a file’s ETag

ServerSignature

En-/disable server signature (on|off|email)

ContentDigest

whether or not to send a Content-MD5 header with each request

LimitRequestBody

Limit (in bytes) on maximum size of request message body

LimitXMLRequestBody

Limit (in bytes) on maximum size of an XML-based request body

ForceType

a mime type that overrides other configured type

SetHandler

a handler name that overrides any other configured handler

SetOutputFilter

filter (or ; delimited list of filters) to be run on the request content

SetInputFilter

filter (or ; delimited list of filters) to be run on the request body

AddOutputFilterByType

output filter name followed by one or more content-types

Apache Authorization

.htaccess directives for controlling authorization (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, trunk/mod/mod_authn_core.html#authname, trunk/mod/mod_authn_core.html#authtype, trunk/mod/mod_authn_file.html#authuserfile, trunk/mod/mod_authz_core.html#require).

Apache Files and Information

.htaccess directives controlling document types (defaulttype, errordocument, forcetype, trunk/mod/mod_negotiation.html#languagepriority, sethandler, setinputfilter, setoutputfilter, trunk/mod/mod_headers.html#header, trunk/mod/mod_headers.html#requestheader, trunk/mod/mod_setenvif.html#setenvif, trunk/mod/mod_setenvif.html#setenvifnocase, BrowserMatch, CookieExpires, CookieDomain, CookieStyle, CookieTracking, CookieName, trunk/mod/mod_rewrite.html directives RewriteEngine, RewriteOptions, RewriteBase, trunk/mod/mod_rewrite.html#rewritecond, trunk/mod/mod_rewrite.html#rewriterule) and Action from mod_actions.

Apache Directory Indexing

.htaccess directives controlling directory indexing (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, trunk/mod/mod_dir.html#directoryindex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions, ReadmeName).

Apache Access Control

.htaccess directives controlling host access (trunk/mod/mod_authz_host.html#allow, trunk/mod/mod_authz_host.html#deny and Order).

.htaccess Tutorial Index | » htaccess tricks for Webmasters

htaccess sample-.htaccess create-htaccess htaccess-file

Related Articles

• 301 Redirect with mod_rewrite or RedirectMatch
• SEO Redirects without mod_rewrite
• htaccess Tricks for Webmasters
• Redirect index.php to root “/”
• SetEnvIf and SetEnvIfNoCase Examples
• htaccess rewrite, Mod_rewrite tricks
• PHP htaccess tips and tricks
• Log all .htaccess/.htpasswd logins