htaccess spammers and folder question

[netsultants]

Hi,

I have two .htaccess files on my website. One in the root and the other in the /forums folder.

I want to write in code to deny access to a host. I have written this:

order allow,deny
deny from airtelbroadband.in
allow from all

I have only added this to the .htaccess file in the root. The .htaccess file in the /forums folder doesn't have any allow, deny conditions. Will this host still be denied access to the /forums folder or do I need to add the code to the .htaccess file in the /forums folder too?

Thanks

[Jump]

Deny

Hello netsultants,

the .htaccess file in your root can deny IP's.
Get their IP address and add it like this:

<limit GET>
Order Allow,Deny
Deny from 150.70.84.154
</limit>

<Files .htaccess>
order allow,deny
deny from all
</Files>

You can also narrow down the ban by removing numbers from the right end.
Example: the IP 150.70.84.154, can be done like this 150.70, and it will ban any IP that has 150.70 in the beginning.

If this is in the root, it will keep them off the entire site if they access with that IP.

There is also a more direct way to protect your other sensitive folders that requires more work, and the full path of your server, and also the creation of an encrypted password file (.htpasswd).

[mcrider]

.htaccess files effect all sub-directories so having it only in the root will work just fine.

[netsultants]

Thanks guys....

I knew that using a .htaccess file in the root would effect all subdirectories. I just wasn't sure if you have an .htaccess file in the subdirectory would it impact the .htaccess file in the root even if the one in the subdir doesn't have allow/deny info.

[Jump]

Thanks guys....

I knew that using a .htaccess file in the root would effect all subdirectories. I just wasn't sure if you have an .htaccess file in the subdirectory would it impact the .htaccess file in the root even if the one in the subdir doesn't have allow/deny info.

My pleasure netsultants,

If you have not read my other posts in other threads, you can add an extra layer of protection in your admincp, modcp, includes, and your install directories.

Each one of those directories can contain a .htaccess file with their own seperate .htpasswd (encrypted).

It will require you to sign in to an additional username and password that is separate from the regular admin sign in.