Deny all access to a file but one ip | htaccess

Question

I tried the following but DOESNT work(no body can access the file including the IP that i want it to access)

<Files something.php>
Order allow,deny
Deny from all
allow from zzz.zzz.zzz.zzz
</Files>

I want to deny the access to a file to all the world except one ip, how do i do this? Thanks

I am really sorry but I am new to this, do you mean in the .htaccess file? — MariaZ, Nov 28 '12 at 00:49
It does not seem to be anything wrong with that set of rules. ¿What is your question? — Felipe Alameda A, Nov 28 '12 at 01:11
my question is the code doesnt work for me, if you say the code works for you, what would be the reason that doesnt work for me.... :S, thanks!! — MariaZ, Nov 28 '12 at 01:12
The code should be in the .htaccess file at the directory where something.php is. — Felipe Alameda A, Nov 28 '12 at 01:14
Is `.htaccess` enabled on your server? Do other `.htaccess` directives work? How is it failing? (Everyone can access the file? Nobody can access the file?) — nandhp, Nov 28 '12 at 01:17
no body can access the file including the IP that i want it to access — MariaZ, Nov 28 '12 at 01:27
Try with a range, like this: `allow from 192.168.0.0/33` or with a domain name, like this: `allow from .*domain\.com` — Felipe Alameda A, Nov 28 '12 at 01:31

score 1 · Accepted Answer · edited May 23 '17 at 10:24

1

I found my answer in an older post, one of the answers in here: .htaccess: how to restrict access to a single file by IP?, the correct is:

 <Files something.php>
 Order deny, allow
 Deny from all
 allow from zzz.zzz.zzz.zzz
</Files>

from the original I changed "Order allow, deny" to "Order deny, allow" and it works!

edited May 23 '17 at 10:24

Community

answered Nov 28 '12 at 02:10

MariaZ

score 1 · Answer 2 · answered Feb 19 '15 at 05:38

The reason it did not work is because your Deny directive overrode your Allow directive. What Order Allow,Deny does is:

Evaluate Allow, flag "allow" if any matched.
Evaluate Deny, flag "deny" if any matched (even if previously matched by Allow)
Evaluate flag. If flag is not set, deny it.

So, it is required that you remove Deny from All if you do not want all requests to be Denied. Just a note for MickeyRoush's answer.

As for Order Deny,Allow, it's the "opposite":

Evaluate Deny, flag "deny" if any matched.
Evaluate Allow, flag "allow" if any matched (even if previously matched by Deny)
Evaluate flag. If flag is not set, allow it.

See the link MickeyRoush gave for more information.

score 0 · Answer 3 · answered Dec 18 '12 at 18:21

Actually the first directive you used would work, but it would need to be in the correct place.

Order Allow,Deny
<Files something.php>
Allow from zzz.zzz.zzz.zzz
</Files>

Notice that I removed the deny from all as it's not required.

3 Answers3