htaccess 可以做大量范围的事情，包括：文件夹密码保护、用户自动重新指向、自定义 错误页面、变更你的文件扩展名、屏蔽特定的用户 IP 地址、只允许特定的 IP 地址、停止 目录表以及使用其他文件作为 index 文件，等等.1. Introduction 介绍 文件名 .htaccess 属性 644 (RW-RR) htaccess 会影响它所在目录下的所有子目录 注意大多数内容都要求保持在一行之内，不要换行，否则会引起错误2. Error Documents 错误文档Official document: ErrorDocument Directive ErrorDocument code document 例子ErrorDocument 400 /errors/badrequest.html ErrorDocument 404 http:/yoursite/errors/notfound.html ErrorDocument 401 “Authorization Required”more. less. (注意之后内容如果出现的双引号需要转义为 ”) 常见 HTTP 状态码Successful Client Requests 200 OK 201 Created 202 Accepted 203 Non-Authorative Information 204 No Content 205 Reset Content 206 Partial Content Client Request Redirected 300 Multiple Choices 301 Moved Permanently 302 Moved Temporarily 303 See Other 304 Not Modified 305 Use Proxy Client Request Errors 400 Bad Request 401 Authorization Required 402 Payment Required (not used yet) 403 Forbidden 404 Not Found 405 Method Not Allowed 406 Not Acceptable (encoding) 407 Proxy Authentication Required408 Request Timed Out 409 Conflicting Request 410 Gone 411 Content Length Required 412 Precondition Failed 413 Request Entity Too Long 414 Request URI Too Long 415 Unsupported Media Type Server Errors 500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout 505 HTTP Version Not Supported3. Password Protection 密码保护Official document: Authentication, Authorization and Access Control 假设密码文件为.htpasswd AuthUserFile /usr/local/safedir/.htpasswd (这里必须使用全路径名)AuthName EnterPassword AuthType Basic 两种常见验证方式:Require user windix (仅允许用户 windix 登陆)Require valid-user (所有合法用户都可登陆) Tip: 如何生成密码文件 使用 htpasswd 命令(apache 自带) 第一次生成需要创建密码文件htpasswd -c .htpasswd user1 之后增加新用户htpasswd .htpasswd user24. Enabling SSI Via htaccess 通过 htaccess 允许 SSI(Server Side Including)功能AddType text/html .shtml AddHandler server-parsed .shtml Options Indexes FollowSymLinks Includes DirectoryIndex index.shtml index.html5. Blocking users by IP 根据 IP 阻止用户访问order allow,deny deny from 123.45.6.7 deny from 12.34.5. (整个 C 类地址)allow from all6. Blocking users/sites by referrer 根据 referrer 阻止用户/站点访问 需要 mod_rewrite 模块 例 1. 阻止单一 referrer: badsite.comRewriteEngine on # Options +FollowSymlinks RewriteCond %HTTP_REFERER badsite.com NC RewriteRule .* - F 例 2. 阻止多个 referrer: badsite1.com, badsite2.comRewriteEngine on # Options +FollowSymlinks RewriteCond %HTTP_REFERER badsite1.com NC,OR RewriteCond %HTTP_REFERER badsite2.com RewriteRule .* - F NC - 大小写不敏感(Case-insensite)F - 403 Forbidden 注意以上代码注释掉了”Options +FollowSymlinks”这个语句。如果服务器未在 httpd.conf 的 段落设置 FollowSymLinks, 则需要加上这句，否则会得到”500 Internal Server error”错误。7. Blocking bad bots and site rippers (aka offline browsers) 阻止坏爬虫和离线浏 览器 需要 mod_rewrite 模块 坏爬虫? 比如一些抓垃圾 email 地址的爬虫和不遵守 robots.txt 的爬虫(如 baidu?) 可以根据 HTTP_USER_AGENT 来判断它们 (但是还有更无耻的如”中搜 zhongsou.com”之流把自己的 agent 设置为 “Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)” 太流氓了，就无能为力了)RewriteEngine On RewriteCond %HTTP_USER_AGENT BlackWidow OR RewriteCond %HTTP_USER_AGENT Bot mailto:craftbotyahoo.com OR RewriteCond %HTTP_USER_AGENT ChinaClaw OR RewriteCond %HTTP_USER_AGENT Custo OR RewriteCond %HTTP_USER_AGENT DISCo OR RewriteCond %HTTP_USER_AGENT Download Demon OR RewriteCond %HTTP_USER_AGENT eCatch OR RewriteCond %HTTP_USER_AGENT EirGrabber OR RewriteCond %HTTP_USER_AGENT EmailSiphon OR RewriteCond %HTTP_USER_AGENT EmailWolf OR RewriteCond %HTTP_USER_AGENT Express WebPictures OR RewriteCond %HTTP_USER_AGENT ExtractorPro OR RewriteCond %HTTP_USER_AGENT EyeNetIE OR RewriteCond %HTTP_USER_AGENT FlashGet OR RewriteCond %HTTP_USER_AGENT GetRight ORRewriteCond %HTTP_USER_AGENT GetWeb! OR RewriteCond %HTTP_USER_AGENT Go!Zilla OR RewriteCond %HTTP_USER_AGENT Go-Ahead-Got-It OR RewriteCond %HTTP_USER_AGENT GrabNet OR RewriteCond %HTTP_USER_AGENT Grafula OR RewriteCond %HTTP_USER_AGENT HMView OR RewriteCond %HTTP_USER_AGENT HTTrack NC,OR RewriteCond %HTTP_USER_AGENT Image Stripper OR RewriteCond %HTTP_USER_AGENT Image Sucker OR RewriteCond %HTTP_USER_AGENT Indy Library NC,OR RewriteCond %HTTP_USER_AGENT InterGET OR RewriteCond %HTTP_USER_AGENT Internet Ninja OR RewriteCond %HTTP_USER_AGENT JetCar OR RewriteCond %HTTP_USER_AGENT JOC Web Spider OR RewriteCond %HTTP_USER_AGENT larbin OR RewriteCond %HTTP_USER_AGENT LeechFTP OR RewriteCond %HTTP_USER_AGENT Mass Downloader OR RewriteCond %HTTP_USER_AGENT MIDown tool OR RewriteCond %HTTP_USER_AGENT Mister PiX OR RewriteCond %HTTP_USER_AGENT Navroad OR RewriteCond %HTTP_USER_AGENT NearSite OR RewriteCond %HTTP_USER_AGENT NetAnts OR RewriteCond %HTTP_USER_AGENT NetSpider OR RewriteCond %HTTP_USER_AGENT Net Vampire OR RewriteCond %HTTP_USER_AGENT NetZIP OR RewriteCond %HTTP_USER_AGENT Octopus OR RewriteCond %HTTP_USER_AGENT Offline Explorer OR RewriteCond