.htaccess resources: help, examples, tools

[gwyneth]

This thread replaces and updates the previous htaccess resources list (which is on the List of resource list threads, along with other kinds of useful stuff. I'm about to append that list with a note about the update.)

As the Apache* documentation beautifully explains, .htaccess files provide a way to make configuration changes on a per-directory basis.

Siteholders can use an .htacess file to control how the server behaves when it serves up pages in a directory and all subdirectories within (until and unless it encounters another .htaccess file). This is especially handy for people whose sites are on a shared/reseller server, because it's an alternative to the server-wide configurations they can't affect. It's also useful for dedi owners who want to pinpoint behavior, without affecting the whole server.

The links on this list provide assorted explanations, examples, code-to-copy, and include a great online .htaccess generator. I'm putting that link first, though to make the most of it you may need to read the info you get through the other links:

htaccess Generator (comprehensive)

I think the next link is the most comprehensive, easy to follow reference, but newbies may find the stuff in the next section more illuminating.

Stupid htaccess Tricks (long list, cataloged by how to)

Next, in order roughly of how basic and comprehensive they are, are what I consider the most useful sources of info:

Wise-Women: Tutorial: Using the . htaccess File

Beginners Guide to . htaccess File with Examples (good explanation)

Clockwatchers - . htaccess Tutorial - Introduction (excellent, basic walkthough and diagnosis)

. htaccess Tools (interactive, faqs)

Comprehensive guide to . htaccess - intro

Ultimate htaccess Examples | evolt.org

the jackol’s den » htaccess Cheatsheet - Mikhail Esteves

These three are from the Apache folks themselves--your cPanel will show you which version of Apache your server is running.

Apache 1.3 Tutorial: . htaccess files

Apache 2.0 Tutorial: .htaccess files - Apache HTTP Server

Apache 2.2 Tutorial: .htaccess files - Apache HTTP Server

Here are a few sites that discuss how .htaccess files can boost your site's security:

A Close to perfect . htaccess ban list (c. 2001)

A Close to perfect .htaccess ban list - Part 2

Comprehensive guide to . htaccess - Blocking bad bots and site ...

Proper syntax for banning bad bots in htaccess

Security4all: Blocking Bots with .htaccess Ban List

Preventing Image Bandwidth Theft With . htaccess (thesitewizard.com)

Watch out for Wordpress .htaccess hack

Here are other relevant links from my bookmark list:

Vortexmind: free your mind » Apache . htaccess tweaking tutorial

Fun with . htaccess

5 htaccess Tricks Every Webmaster Should Know

.htaccess File and mod_rewrite examples

mod_rewrite Tips and Tricks for Apache .htaccess

*As you probably knew or figured out from context, Apache is the name of the software that runs most servers. If you don't have a Windows server here at HG--AND YOU PROBABLY DON'T, your Linux server runs Apache, and vice versa.)

[slapshotw]

Wow, this is huge-- thanks Gwyneth. It'll be great to be able to point people here.

[striddy]

Originally Posted by gwyneth

This thread replaces and updates the previous htaccess resources list (which is on the List of resource list threads, along with other kinds of useful stuff.

Gwyneth does it again with another fantastic resource list.

[virtvir5]

You might want to update those "close to perfect" ban lists. They're several years behind enemy advances. In fact, keeping up with "bad bots" and their offshoots is a neverending process. Any static listing that isn't updated regulary rapidly falls victim to obsolesence.

[gwyneth]

Thanks, Matt and David! I went through the old list and rearranged it, checked all the links, pruned some and added some.

Originally Posted by virtvir5

You might want to update those "close to perfect" ban lists. They're several years behind enemy advances. In fact, keeping up with "bad bots" and their offshoots is a neverending process. Any static listing that isn't updated regulary rapidly falls victim to obsolesence.

Yes, of course...but a) they're not not my ban lists and b) the idea is to show people what's possible.

Somewhere I've got a link for a site that has a list of about 15,000 user agents, but it may be on another computer and several search queries just now failed to get Google to spill it up.

IMO, that shows that people should think and do some research before implementing any ban list that goes beyond their own known bad visitors.

Here is some other pertinent info. The first link is to the "Stupid .htacess tricks" site mentioned above.

Ultimate htaccess Blacklist 2 (Compressed Version) • Perishable Press

Treasure Coast Designs » Denying IP Ranges with htaccess

10 awesome . htaccess hacks for WordPress

ZB Block, Protect Your PHP Driven Site from Spam and Hacks ...

16 Useful . htaccess Tricks and Hacks For Web Developers

How to stop image hotlinking and bandwidth theft | David Airey ...

[virtvir5]

Originally Posted by gwyneth

IMO, that shows that people should think and do some research before implementing any ban list that goes beyond their own known bad visitors.

I agree. That's why I posted this item which links to a UA list that is regularly updated based on currently ongoing research dedicated to precisely that purpose.

I understand your point that none of the links and lists are your own, but that's not an issue as far as I'm concerned. Anyone is welcome to grab "mine" (actually Michael Hampton's converted for .htaccess) and do anything they want with it. In fact, that was my primary intention.

[GatorJacob]

Sticked

Nice information Gwyneth!

[gwyneth]

For people who are having trouble seeing (finding) .htacess files, Rick has some help here.

[avalanch]

Here is another great person and a great deal of .htaccess can be learned by this thread here.
http://forums.digitalpoint.com/showthread.php?t=23044

[Doru]

Nice tutorial! Thanks you gwyneth.

[gwyneth]

Towards the end of this thread, kompreszor has provided an excellent example of what to put in an .htacess file to keep bad bots from affecting a forum:

How can I limit baidu spider? - HostGator Peer Support Forums