[理论探讨] .htaccess 学习笔记

sogood

版主

Rank: 7 Rank: 7 Rank: 7

1^# 大中小发表于 2007-2-28 23:10 只看该作者

.htaccess 学习笔记

.htaccess可以做大量范围的事情，包括：文件夹密码保护、用户自动重新指向、自定义错误页面、变更你的文件扩展名、屏蔽特定的用户IP地址、只允许特定的IP地址、停止目录表以及使用其他文件作为index文件，等等...... # Z% x6 S9 n2 a0 h7 a

1. Introduction 介绍 . N/ V$ t- Y; j  f8 F( p. a$ N! h- T
文件名 .htaccess 属性 644 (RW-R–R–) 3 T/ z0 j& t% p: h; L! K
htaccess会影响它所在目录下的所有子目录
注意大多数内容都要求保持在一行之内，不要换行，否则会引起错误 ' v7 {% O% O" Y8 x* @
) y5 N1 a! Y& v3 a7 u
2. Error Documents 错误文档
Official document: ErrorDocument Directive
ErrorDocument code document
例子
ErrorDocument 400 /errors/badrequest.html
ErrorDocument 404 http://yoursite/errors/not... ) d3 |8 u3 r- @: a9 k6 S
ErrorDocument 401 “Authorization Required”
(注意之后内容如果出现的双引号需要转义为 ”)
常见HTTP状态码
Successful Client Requests + c$ p  V4 `+ ]
200 OK
201 Created + E* X1 g% C0 b, G
202 Accepted
203 Non-Authorative Information + b# K1 J: J; R$ N
204 No Content
205 Reset Content / o4 ^3 \7 U3 @- |1 _/ _7 l! D
206 Partial Content
Client Request Redirected " B4 Z- ?+ J; V6 ]5 D
300 Multiple Choices
301 Moved Permanently ) X5 _& v& M4 T1 z
302 Moved Temporarily
303 See Other
304 Not Modified , K. T% {+ v! J( k. H# r" a1 J
305 Use Proxy
Client Request Errors
400 Bad Request 4 y+ D2 h9 a" n: V
401 Authorization Required 0 N! z! j1 D2 u: J0 I) M  n. j
402 Payment Required (not used yet)
403 Forbidden $ A6 h1 h, b8 N2 [
404 Not Found
405 Method Not Allowed
406 Not Acceptable (encoding)
407 Proxy Authentication Required : s2 F% y: A! {/ K, ~( \9 ?0 f& a
408 Request Timed Out
409 Conflicting Request % K9 Z( C1 ^, n2 K6 O3 ]# U  {: J
410 Gone
411 Content Length Required 8 M; e3 K- F& l9 [" t
412 Precondition Failed
413 Request Entity Too Long
414 Request URI Too Long # M$ D- ^. h6 w0 P( r. f
415 Unsupported Media Type
Server Errors
500 Internal Server Error   r$ Y% I6 m5 U: a+ y9 A1 y
501 Not Implemented ' d3 f  x& h1 S( E  m
502 Bad Gateway % a/ k9 {3 C, ]: T
503 Service Unavailable ! X! @& c5 ]! Z2 W/ q. F! R0 s1 d
504 Gateway Timeout
505 HTTP Version Not Supported 4 a+ T+ t* {1 C# K+ T

3. Password Protection 密码保护
Official document: Authentication, Authorization and Access Control 1 I, V2 q7 l& T4 o3 g5 q
假设密码文件为.htpasswd 1 L. T* v9 |$ c% y0 h
AuthUserFile /usr/local/safedir/.htpasswd (这里必须使用全路径名) 8 z) ^8 k; V$ n; B, Q) O1 b
AuthName EnterPassword 1 n6 m- ^: r& w% B
AuthType Basic
两种常见验证方式: ' P* _2 y; q1 h$ X0 T3 C: H$ g! N
Require user windix
(仅允许用户windix登陆) 1 ~; a7 x! w) W# ?; i
Require valid-user ; G& S8 L8 z" B
(所有合法用户都可登陆)
Tip: 如何生成密码文件
使用htpasswd命令(apache自带) % J! c: q1 v# T! d& K3 ^& z' Q
第一次生成需要创建密码文件
htpasswd -c .htpasswd user1
之后增加新用户
htpasswd .htpasswd user2
- ^6 e5 w6 f5 \' _6 X. g  D/ B
4. Enabling SSI Via htaccess 通过htaccess允许SSI(Server Side Including)功能
AddType text/html .shtml ' b: g; r) g; L0 X
AddHandler server-parsed .shtml
Options Indexes FollowSymLinks Includes   _4 }6 o: Q8 f& S9 N- S
DirectoryIndex index.shtml index.html
& X6 \* ~% @( K( h2 b" K
5. Blocking users by IP 根据IP阻止用户访问 ) R+ u6 f2 C& x! q
order allow,deny # v1 y2 s  Y1 n- Z$ B- h7 U
deny from 123.45.6.7 & T% n4 U( @' N; z' @
deny from 12.34.5. (整个C类地址) 1 u4 ^  W4 n. K' a6 y' |
allow from all 1 j( f) R  n9 R! Y

6. Blocking users/sites by referrer 根据referrer阻止用户/站点访问 2 B" e4 P0 b; I
需要mod_rewrite模块
例1. 阻止单一referrer: badsite.com   u& Q' {6 F5 D" _( F
RewriteEngine on
# Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} badsite.com [NC]
RewriteRule .* - [F] 9 {$ w% k4 ~; Z% `- Z! W
例2. 阻止多个referrer: badsite1.com, badsite2.com
RewriteEngine on
# Options +FollowSymlinks ' f- L3 ]9 U% h. \# m
RewriteCond %{HTTP_REFERER} badsite1.com [NC,OR]
RewriteCond %{HTTP_REFERER} badsite2.com ) A- s4 v3 j9 v) N7 b( K' J
RewriteRule .* - [F]
[NC] - 大小写不敏感(Case-insensite)
[F] - 403 Forbidden
注意以上代码注释掉了”Options +FollowSymlinks”这个语句。如果服务器未在 httpd.conf 的段落设置 FollowSymLinks, 则需要加上这句，否则会得到”500 Internal Server error”错误。

7. Blocking bad bots and site rippers (aka offline browsers) 阻止坏爬虫和离线浏览器 % g* M- t+ x  H5 u; M/ m1 V1 S
需要mod_rewrite模块
坏爬虫? 比如一些抓垃圾email地址的爬虫和不遵守robots.txt的爬虫(如baidu?)
可以根据 HTTP_USER_AGENT 来判断它们
(但是还有更无耻的如”中搜 zhongsou.com”之流把自己的agent设置为 “Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)” 太流氓了，就无能为力了)   G( g- Y9 D- w; J' e* U5 B
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR] 7 \5 ^$ k- ^2 p8 o
RewriteCond %{HTTP_USER_AGENT} ^Bot mailto:craftbot@yahoo.com [OR] 0 ~8 L+ f6 k, L  h
RewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR] 1 V5 ~  g) ~- X$ h3 t! B! P/ m
RewriteCond %{HTTP_USER_AGENT} ^Custo [OR] 2 E8 S- k: j" S
RewriteCond %{HTTP_USER_AGENT} ^DISCo [OR] # x! d/ {$ ^4 v3 c7 @9 i
RewriteCond %{HTTP_USER_AGENT} ^Download Demon [OR]
RewriteCond %{HTTP_USER_AGENT} ^eCatch [OR]
RewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR] 5 G0 U) D. a8 X9 r
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR] 7 E( {! i. ?0 B4 k
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR] . Z" e2 {) r+ {+ H7 n! C. y
RewriteCond %{HTTP_USER_AGENT} ^Express WebPictures [OR]
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]
RewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR]   U" f. P' q, c% X2 A/ Q
RewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR]
RewriteCond %{HTTP_USER_AGENT} ^GetRight [OR] 8 y0 N0 B- Y0 M* f
RewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR] , p' P+ ^$ [8 ?- m4 b* h& \
RewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR]
RewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR]
RewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR] ( G+ c6 X: T" v$ Q9 b/ w
RewriteCond %{HTTP_USER_AGENT} ^Grafula [OR]
RewriteCond %{HTTP_USER_AGENT} ^HMView [OR]
RewriteCond %{HTTP_USER_AGENT} HTTrack [NC,OR] & ^7 T7 F& \) {4 y, r+ x
RewriteCond %{HTTP_USER_AGENT} ^Image Stripper [OR]
RewriteCond %{HTTP_USER_AGENT} ^Image Sucker [OR]
RewriteCond %{HTTP_USER_AGENT} Indy Library [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^InterGET [OR]
RewriteCond %{HTTP_USER_AGENT} ^Internet Ninja [OR]
RewriteCond %{HTTP_USER_AGENT} ^JetCar [OR] # X' j# u- u, E
RewriteCond %{HTTP_USER_AGENT} ^JOC Web Spider [OR] . R  `3 I/ S0 }( a; w& G
RewriteCond %{HTTP_USER_AGENT} ^larbin [OR] * n: `2 A! X) h- V
RewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mass Downloader [OR]
RewriteCond %{HTTP_USER_AGENT} ^MIDown tool [OR] # q- ~9 p* o; b% h# W/ A
RewriteCond %{HTTP_USER_AGENT} ^Mister PiX [OR] 6 u6 V" k* a" C9 o
RewriteCond %{HTTP_USER_AGENT} ^Navroad [OR] 4 J& J. D* s" N, q. n
RewriteCond %{HTTP_USER_AGENT} ^NearSite [OR]
RewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR] , q3 R% k1 _% p! i
RewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR] 4 X/ o/ j2 ?( z  w3 x+ b
RewriteCond %{HTTP_USER_AGENT} ^Net Vampire [OR]
RewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR]
RewriteCond %{HTTP_USER_AGENT} ^Octopus [OR]
RewriteCond %{HTTP_USER_AGENT} ^Offline Explorer [OR]
RewriteCond %{HTTP_USER_AGENT} ^Offline Navigator [OR]
RewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR] 1 ?+ j3 G- f4 `2 R3 @; U3 F
RewriteCond %{HTTP_USER_AGENT} ^Papa Foto [OR] - @2 X+ k% q! |+ R, \8 N" Y7 {
RewriteCond %{HTTP_USER_AGENT} ^pavuk [OR] . H$ o9 u8 {0 I
RewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR]
RewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR]
RewriteCond %{HTTP_USER_AGENT} ^ReGet [OR] % P% B' D1 S6 I: ^- }4 r+ i7 G
RewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR]
RewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR]
RewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR]
RewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR]
RewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR] , @: q0 V/ {; e. `
RewriteCond %{HTTP_USER_AGENT} ^Teleport Pro [OR]
RewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR] 1 ?: X2 |2 V$ ]; K1 p( |" \
RewriteCond %{HTTP_USER_AGENT} ^Web Image Collector [OR] . T! E" _0 m% ^) y; H3 U
RewriteCond %{HTTP_USER_AGENT} ^Web Sucker [OR] ( G: m- R7 W4 f9 {' o( ~4 l
RewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR] 7 Z. G3 d, I+ V  y0 X' y
RewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR] 3 s$ c7 Y2 w8 e0 Y0 r: K
RewriteCond %{HTTP_USER_AGENT} ^WebGo IS [OR] * e- n) q  V. I4 v2 u# q, R
RewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR]   A  S& Z: N. o7 D& {0 o
RewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR] " `( [4 @1 t0 x+ C  a
RewriteCond %{HTTP_USER_AGENT} ^Website eXtractor [OR]
RewriteCond %{HTTP_USER_AGENT} ^Website Quester [OR] 3 w/ n6 A( a7 d0 f
RewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR] : t: b0 U+ }0 F) {7 `$ }4 c
RewriteCond %{HTTP_USER_AGENT} ^WebWhacker [OR] & w# X3 O9 g* u' U  V3 g
RewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR] 8 b# B  A% v, _! k
RewriteCond %{HTTP_USER_AGENT} ^Wget [OR]
RewriteCond %{HTTP_USER_AGENT} ^Widow [OR] 7 ^8 ]2 i6 P1 l" {- T8 g
RewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR] / w- C0 [  S/ z
RewriteCond %{HTTP_USER_AGENT} ^Xaldon WebSpider [OR] ! s& {! h  i! J# N
RewriteCond %{HTTP_USER_AGENT} ^Zeus . z7 Q" n# S% Y; |
RewriteRule ^.* - [F,L] * h  Q6 |8 [$ m/ o" R0 l8 r
[F] - 403 Forbidden
[L] - ? ; W& c7 _6 [# [- M7 ?2 F
! i! _: e  n& X, `7 P
8. Change your default directory page 改变缺省目录页面 8 ~  Z! n/ E: z
DirectoryIndex index.html index.php index.cgi index.pl

9. Redirects 转向
单个文件 8 L3 M- t: I0 g: J5 ]6 i) Q
Redirect /old_dir/old_file.html http://yoursite.com/new_di...
整个目录
Redirect /old_dir http://yoursite.com/new_di... 3 L2 M& u. V% g4 g; i" g
效果: 如同将目录移动位置一样
http://yoursite.com/old_di... -> http://yoursite.com/new_di... $ e3 `5 E" ]4 g3 A. W; u
http://yoursite.com/old_di... -> http://yoursite.com/new_di...
Tip: 使用用户目录时Redirect不能转向的解决方法
当你使用Apache默认的用户目录，如 http://mysite.com/~windix，当你想转向 http://mysite.com/~windix/...时，你会发现下面这个Redirect不工作: + I; Q( T1 L  }6 z& C& e
Redirect /jump http://www.google.com 4 b9 D4 N/ K( N5 _) [
正确的方法是改成
Redirect /~windix/jump http://www.google.com   |+ k& H* K0 ]3 A, i
(source: .htaccess Redirect in “Sites” not redirecting: why?
)

10. Prevent viewing of .htaccess file 防止.htaccess文件被查看 ) C9 x/ p3 R& o9 s
order allow,deny 7 ]6 f7 U1 l6 M6 e1 _& l
deny from all
8 f4 S) ~$ H( O: _6 L" o
11. Adding MIME Types 添加 MIME 类型 % A6 ?* m: f: g
AddType application/x-shockwave-flash swf
Tips: 设置类型为 application/octet-stream 将提示下载

12. Preventing hot linking of images and other file types 防盗链
需要mod_rewrite模块 $ g6 M- s# Z' V
RewriteEngine on % r( e: J6 a' l- G
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www/.)?mydoma...*$ [NC] 6 j; @5 [9 D9 i+ Y
RewriteRule .(gif|jpg|js|css)$ - [F] ; y+ Q$ H5 g. c8 j7 s
解析:
若 HTTP_REFERER 非空 (来源为其他站点，非直接连接) 并且 ' ]5 O' c1 ?; P0 ^( c# d. X
若 HTTP_REFERER 非(www.)mydomain.com开头(忽略大小写[NC]) (来源非本站) , c3 t( N  m$ ?" e. z8 h4 p- T
对于所有含有 .gif/.jpg/.js/.css 结尾的文件给出 403 Forbidden 错误[F]
也可指定响应，如下例显示替换图片
RewriteRule .(gif|jpg)$ 6 v! ~5 @7 ?0 O  B4 T
[R,L]
[R] - 转向(Redirect)
[L] - 连接(Link)
7 }! w. x" J7 W% T' h( V
13. Preventing Directory Listing 防止目录列表时显示 5 Y8 S& A) Q) v
IndexIgnore * ; m1 d3 B3 F0 C3 @4 V* W
IndexIgnore *.jpg *.gif & n0 |% Z9 U1 l; p: p0 Y, q
Tips: ; Q* O5 `! |2 ~7 z5 p) p
允许目录列表显示: Options +Indexes * T) s- A- t1 D+ U
禁止目录列表显示: Options -Indexes
显示提示信息: 页首文件HEADER, 页尾文件README

TOP

设计图片在线处理软件

‹‹ 上一主题 | 下一主题 ››