deny accessing the dir but still allow images in the dir to be used by 'HTML'

wikignu · 01-12-2009, 07:45 AM

deny 'directly' allow 'indirectly' (.htaccess)

I am running apache web server on CentOS5.2
I have the directory in which stores a lot of images.(/var/www/html/images)
I want to deny everyone from directly accessing the directory but still allow images in the directory to be used by 'HTML' (/var/www/html/pic.html <img src="http://localhost/images/hotimg.jpg">)

=>someone cannot access that specific directory directly.
1)create .htaccess in images directory
2)type following lines and save
order allow,deny
deny from all

but I don't know how to allow images in the directory to be used by HTML(pic.html <img src="http://localhost/images/hotimg.jpg">)

thanks in advance

eco · 01-12-2009, 08:58 AM

Hi,

you should be able to do that with Apache, but I did a quick test and manage to protect it by changing the permissions on the images directory:

Code:

# chmod 110 images

Hope this helps as a quick fix.

eco · 01-12-2009, 09:04 AM

... and for the proper way to do things:

This should do it with a chmod 750. You might be able to do better. Read the apache doc.

Code:

<Directory "/var/www/foobar/images/">
 AllowOverride None
 Options -Indexes -MultiViews -FollowSymlinks
 Order deny,allow
 Allow from all
</Directory>