Secure php files without using htaccess?

[6thday]

https://www.zen-cart.com/tutorials/index.php?article=235



My problem is outlined in the article above. Unfortunately my web host (Streamline.net) Have been about as useful as a chocolate teapot.

My question is this : Without htaccess how can I prevent direct browser access to restricted php files?

[yellow1912]

Huh? Disallow php access = shutdown the wholecart since ZC runs on PHP.

[6thday]

My question is this : Without htaccess how can I prevent direct browser access to restricted php files?

I understand that Zen cart runs on php. Those files are accessed by scripts, not by pointing your browser directly towards them. Htaccess files uploaded to directories that contain php files prevent direct accessing them in this way. However Streamline will not allow me to use the "limit" keyword in my htaccess file rendering it functionally useless.

Did you read the article?

https://www.zen-cart.com/tutorials/index.php?article=235


I posted it for a reason. The issue is outlined in there.

[Stumpy74]

I need help (and not just from my zen cart......)

Today I tried installing a SEO mod which included creating a .htaccess file in the main directory of the shop (where index.php lives) : from that time onwards I can access the store OK but can't get into admin. I have since pulled right back - deleted the .htaccess retored the /admin and /includes directory for any overwrites.

I still can't access admin and get a HTTP 500 error. Digging around I don't have a .htaccess file int he /admin and /admin/includes directory as per the download - so tried copying them across without any luck.

I can access the store and log in so think the SSL side of things is OK. If anyone has any ideas I'm happy to give anything a shot. Have fired off email to web service providers but its the weekend and very quiet......help please !!!!

The site is www.adorablebabycakes.com.au
version 1.3.8a

[Stumpy74]

OK its fixed.......when I restored my site there were still some of the add on files there.......

Out of interest which .htaccess files should be on the site from the install package ? I can't remember deleting them.

[Website Rob]

I do believe the default files have 3.

includes/.htaccess
admin/.htaccess
admin/includes/.htaccess

Would be a good idea to have a untouched copy of the default install on your computer, for an easy place to reference.