: How to protect my files on Heroku My sendemail.php file is located in the root of my website, is there a way to protect it? Also i want to protect or hide my js folder, so noone can see

@Ann8826881

#<Files ~ ".js$">
# order allow,deny
# deny from all
#</Files>



Yes, you will get a 403 Forbidden with the above code when trying to access any .js file, regardless of the way you access it, either from a direct link or when linked in your HTML source (unless it is pulled from your browser cache).

And that's the problem, you can't really protect client-side JavaScript files. They need to be downloaded to the client/browser in order to run. Once they are downloaded, they can be viewed.

However, sendmail.php is a different matter. This runs entirely on the server. But it depends on how it is being called whether it can be "protected". For example, if it's being called directly from an HTML form's action attribute then it can't simply be "hidden", as it will be hidden from your HTML form as well. In this case you need to make sure the script is secure, validating all inputs, spam protection, etc.

Vote Up Vote Down