虚拟主机中：.htaccess学习笔记

Apache的配置文件.htaccess是个难点，也是个重点。一直都没安下心来好好学学，甚至一直以为Redirect方法是属于mod_rewrite，用到的时候也都是糊里糊涂的。今天找到了一个很好的教程，一边学，一边写点心得。

updated: 不断修正一些小问题phpma.com

Source: Comprehensive guide to .htaccess

Officical reference: Directive Quick Reference

1 Introduction 介绍
文件名 .htaccess 属性 644 (RW-R–R–)phpma.com
htaccess会影响它所在目录下的所有子目录
注意大多数内容都要求保持在一行之内，不要换行，否则会引起错误

2 Error Documents 错误文档
Official document: ErrorDocument Directive

ErrorDocument code document
例子
ErrorDocument 400 /errors/badrequest.html
ErrorDocument 404 http://yoursite/errors/notfound.html
ErrorDocument 401 “Authorization Required”
(注意之后内容如果出现的双引号需要转义为 \”)

常见HTTP状态码phpma.com

Successful Client Requests

200 OK
201 Created
202 Accepted
203 Non-Authorative Information
204 No Content
205 Reset Content
206 Partial Content

Client Request Redirected

300 Multiple Choices
301 Moved Permanently
302 Moved Temporarily
303 See Other
304 Not Modified
305 Use Proxy

Client Request Errors

400 Bad Request
401 Authorization Required
402 Payment Required (not used yet)
403 Forbidden
404 Not Found
405 Method Not Allowed
406 Not Acceptable (encoding)
407 Proxy Authentication Required
408 Request Timed Out
409 Conflicting Request
410 Gone
411 Content Length Required
412 Precondition Failed
413 Request Entity Too Long
414 Request URI Too Long
415 Unsupported Media Type

Server Errors

500 Internal Server Error
501 Not Implemented
502 Bad Gateway
503 Service Unavailable
504 Gateway Timeout
505 HTTP Version Not Supported

3 Password Protection 密码保护
Official document: Authentication, Authorization and Access Control

假设密码文件为.htpasswd

AuthUserFile /usr/local/safedir/.htpasswd (这里必须使用全路径名)
AuthName EnterPassword
AuthType Basic

两种常见验证方式:phpma.com
Require user windix
(仅允许用户windix登陆)
Require valid-user
(所有合法用户都可登陆)

Tip: 如何生成密码文件
使用htpasswd命令(apache自带)

第一次生成需要创建密码文件
htpasswd -c .htpasswd user1

之后增加新用户
htpasswd .htpasswd user2

4 Enabling SSI Via htaccess 通过htaccess允许SSI(Server Side Including)功能
AddType text/html .shtml
AddHandler server-parsed .shtml
Options Indexes FollowSymLinks Includes

DirectoryIndex index.shtml index.html

5 Blocking users by IP 根据IP阻止用户访问
order allow,deny
deny from 123.45.6.7
deny from 12.34.5. (整个C类地址)
allow from all

6 Blocking users/sites by referrer 根据referrer阻止用户/站点访问
需要mod_rewrite模块

例1. 阻止单一referrer: badsite.com
RewriteEngine on
# Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} badsite\.com [NC]
RewriteRule .* - [F]

例2. 阻止多个referrer: badsite1.com, badsite2.com
RewriteEngine on
# Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} badsite1\.com [NC,OR]
RewriteCond %{HTTP_REFERER} badsite2\.com
RewriteRule .* - [F]

[NC] - 大小写不敏感(Case-insensite)
[F] - 403 Forbiddenphpma.com

注意以上代码注释掉了”Options +FollowSymlinks”这个语句。如果服务器未在 httpd.conf 的 段落设置 FollowSymLinks, 则需要加上这句，否则会得到”500 Internal Server error”错误。

7 Blocking bad bots and site rippers (aka offline browsers) 阻止坏爬虫和离线浏览器
需要mod_rewrite模块

（阅读次数：）