How to block .log file using in .htaccess

linux log file normally contain some sensitive information about a website. it’s good to block .log file from being access by visitor. If log file is not block, hacker might use the log file content to launch attack or profile a website. If you are running apache webserver, you can easily block .log file using .htaccess

To block .log file using .htaccess, follow the steps below:-

Advertisements

Go to your document root directory (normally it’s the folder name is ‘public_html’, ‘www’, ‘htdocs’ folder)
Create a new .htaccess file (if you already have a .htaccess file, just edit it)

Append the code below to your .htaccess file:-


    Order allow,deny
    Deny from all
    Satisfy All

Now you can try to upload a test.log file to your document root and try to access it, you should be seeing “Forbiden Error” or messages saying you cant read the file