Edit Question - KnowledgeHub

Title Body

I have looked around on Google and StackOverflow for the answer to this question, but the fact that I don't know much about .htaccess doesn't help me decide what the correct answers for my situation are, so I am asking here. My situation is that I have several sites that are using the same physical directory as their root on the server. This is all working fine but I wanted to make sure that each site can't access each others images etc from the browser unless they are on the correct domain. Currently I have a file structure like this: /resources/{resource}/{full_domain_name} So for example www.domain.co.uk would have a structure like this: http://www.domain.co.uk/resources/images/www.domain.co.uk/some_image.jpg But if www.domain_2.co.uk exists using the same physical directory for the site root then they can look at other domain's resources from their own domain, like this: http://www.domain_2.co.uk/resources/images/www.domain.co.uk/some_image.jpg This isn't really a major problem since there is absolutely no sensitive information stored in these directories, but it's more of an annoyance and I would rather users were not able to do it (not that anyone actually has so far). I tried putting a .htaccess file into the /resources directory but I'm stuck with the regular expressions etc. I basically want to make sure that the URI contains the current domain name otherwise redirect to a 403 error page. This is what I came up with: RewriteCond %{REQUEST_URI} !^(/resources/[^/]*/%{HTTP_HOST})(.*)$ RewriteRule ^(.*)$ /error/403.php The reason I put in the [^/] bit is because there are several folders, for example: /resources/images/{full_domain_name} /resources/scripts/{full_domain_name} /resources/stylesheets/{full_domain_name}

Tags (comma-separated) Cancel