Preventing viewing css and js files using direct url

Question

I am trying to prevent the direct access to my website resources using htaccess.My website is orlandojoes.co.uk/clouds which is a subfolder.But if i enter orlandojoes.co.uk/clouds/css/style.css in the address bar i can see them.But i want to prevent seeking them and redirect to index.html.

I am trying:

RewriteEngine on 
RewriteCond %{HTTP_REFERER} !^http://(www\.)?orlandojoes.co.uk\.ltd [NC] 
RewriteCond %{HTTP_REFERER} !^http://(www\.)?orlandojoes.co.uk\.ltd.*$ [NC] 
RewriteRule \.(gif|jpg|js|txt|css)$ /HeyManYouHaveComeToAwrongPlace;) [L]

But it blocks all.Even in index.html page show only markups not with stylings. What can be a solve?

Why do you want to block direct access? Even if you succeed, the user can still view the files after loading whichever of your html pages use those resources. — nnnnnn
– nnnnnn, Commented Jul 12, 2015 at 4:45
looking at the ReqriteCond lines, you'd block requests unless they came from www.orlandojoes?co?uk.ltd - where ? is any character - I think you need to check the RewriteCond syntax — Jaromanda X
– Jaromanda X, Commented Jul 12, 2015 at 4:55
@nnnnnn its not a problm if they can see which resources i am using... such as i am using style.css but i want them not to access into the file — Musa Muaz
– Musa Muaz, Commented Jul 12, 2015 at 4:56
There is no way to prevent the user seeing the contents of your css file once the browser has loaded an html page that uses that css file. — nnnnnn
– nnnnnn, Commented Jul 12, 2015 at 5:13

Shrinivas Shukla · Accepted Answer · 2015-07-12 06:10:18Z

2

Simple Answer: You cannot do that.

If you want the browser to apply CSS to your webpage and execute JavaScript, then you cannot prevent it from the users.

If you manage to block the CSS and JS files, then how will the browser access them?

The most you can do is minify or uglify, which will just make it difficult (not impossible) to view your CSS and JavaScript.

edited Jul 12, 2015 at 6:10

answered Jul 12, 2015 at 5:10

Shrinivas Shukla

4,4632 gold badges23 silver badges35 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Preventing viewing css and js files using direct url

I am trying:

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

I am trying:

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related