.htaccess, deny to download files within a directory

Question

I am trying to deny everyone to download anything inside the "attachment" directory.

My website structure is:

    public_html
    -img
    -css
    -root
    --attachment
    ---(numeric id)
    ----(files)
    -js

What I am trying to do is, to deny access to root/attachment//

I tried many things, but I don't know why, I cannot get it working, my last tried was:

.htaccess - on main directory.

    <FilesMatch "root/attachment/.*/.*">
        Order Allow,Deny
        Deny from all 
    </FilesMatch>

Any ideas? Thank you very much :)

Answer 1

FilesMatch doesn't work with directories.

Create a new .htaccess inside root/attachment/ as

<FilesMatch ".*">
    Order Allow,Deny
    Deny from All
</FilesMatch>

Redirect rules specified in a parent directory .htaccess apply to its sub-directories as well. In case, these access rules do not work the same way, just move the .htaccess directly into files directory.