htaccess Elite

When a visitor tries to obtain access to your .htaccess or .htpasswd file, the server automatically generates a 403 forbidden error, even with the file permissions at their default settings. However, you can apply a bit more security to your .htaccess files by adding the following code:

Code: Select all

<Files .htaccess>
order allow,deny
deny from all
</Files>


Also remember to chmod 644 your .htaccess files, and 640 your .htpasswd files.