.htaccess deny files in subfolders

Question

I want to block access to "sub/folder/index.php", but not "index.php" anywhere else.

<Files index.php>
    Order allow,deny
    Deny from all
</Files>

works but blocks all "index.php" files.

<Files sub/folder/index.php>
    Order allow,deny
    Deny from all
</Files>

doesn't work. Do I need to use <Directory>?

I don't want to create an .htaccess file in the sub/folder

I don't have access to httpd.conf

I don't want to block everything in sub/directory

If it were that easy, I wouldn't be asking ;)

Answer 1

I think the simpliest rule is:

RedirectMatch 403 ^.*/sub/folder/index\.php$

RedirectMatch is in mod_alias module, that you certainly have. This does not implies mod_rewrite engine. Here we are simply telling apache that any access to sub/folder/index.php will generate a "403 forbidden" answer.

You can put that in a httpd.conf or in the root .htaccess (but really consider removing all .htaccess, it's bad, it's slow, it's sad that you do not have access to the real configuration files).