CODEWITHSUNDEEP
.htaccesshtml4
Nijn
Nijn

Reputation: 400

Prevent direct access to htm files, allow access through <frame> tags

I'm working with an older web application that uses the HTML4 <frame> tag to insert the navbar, content etc. in the index.php file.

I want to allow the <frame> tag to load these files, but to prevent direct access to these .htm files.

It's not possible to change any of these .htm files as they are build automatically next time the application is updated with input. So it has to be done through .htaccess I assume.

I've tried to work with the following code, but this blocks the .htm files loading into the <frame> tag:

RewriteEngine on 
RewriteCond %{HTTP_REFERER} !^https://(www\.)?domain [NC] 
RewriteCond %{HTTP_REFERER} !^https://(www\.)?domain.*$ [NC] 
RewriteRule \.(htm)$ - [F]

Frame tag section:

<frameset>
   <frame src="index.htm">
</frameset>

Upvotes: -2

Views: 35

Answers (1)

Nijn
Nijn

Reputation: 400

Rewrote the condition to check on to the referrer (index.php).

RewriteCond %{HTTP_REFERER} !^https://example.com/index.php$ [NC] 
RewriteRule \.(htm)$ - [F]

Thanks to CBroe for clearing my mind.

Upvotes: 0

Related Questions