編輯“WordPress:Htaccess for subdirectories”（章節(jié)）

== 使用.htaccess保護(hù)單個(gè)的目錄==

One possible solution for this problem is provided by .htaccess. You can add a .htaccess file to any directory that requires lenient permissions settings (such as 760, 766, 775 or 777). You can prevent the execution of scripts inside the directory and all its sub-directories. You can also prevent any files other than those of a certain type to be written to it.

.htaccess提供了一種解決問題的方法。你可以向任何需要較寬松的權(quán)限設(shè)置（如760，766，775或者777）的目錄，添加.htaccess文件。你可以阻止目錄和所有的子目錄中的，腳本的運(yùn)行。你也可以禁止除了某個(gè)類型之外的其它文件的寫權(quán)限。

The following snippet of code prevents any files other than .jpeg, .jpg, .png. or .gif to be uploaded to the directory:
下面是一小片代碼，阻止除了.jpeg, .jpg, .png. 或者 .gif的任何文件，上傳到目錄上：

<pre>
<Files ^(*.jpeg|*.jpg|*.png|*.gif)>
   order deny,allow
   deny from all
</Files>
</pre>

<pre>
<Files ^(*.jpeg|*.jpg|*.png|*.gif)>
   order deny,allow
   deny from all
</Files>
</pre>

The following code will prevent .pl, .cgi or .php scripts from being executed; instead, they will display as plain text inside the browser window:

下面的代碼阻止運(yùn)行.pl, .cgi 或者 .php 腳本；這些腳本會(huì)在瀏覽器窗口中顯示為純文本：

<pre>
AddType text/plain .pl
AddType text/plain .cgi
AddType text/plain .php
</pre>

<pre>
AddType text/plain .pl
AddType text/plain .cgi
AddType text/plain .php
</pre>

Here's another way to display scripts as plain text instead of executing them:

下面還有一種方式，可以較腳本顯示為純文本，不用運(yùn)行這些腳本：

<pre>
RemoveHandler cgi-script .pl .py .cgi
</pre>

<pre>
RemoveHandler cgi-script .pl .py .cgi
</pre>

The following code categorizes all files that end in certain extensions so that they fall under the jurisdiction of the -ExecCGI command (removes the ability to execute scripts), which also means -FollowSymLinks.

下面的代碼，為帶有某個(gè)擴(kuò)展名的所有文件分類，這樣這些文件就歸屬-ExecCGI命令的權(quán)限（就不能夠運(yùn)行腳本），也意味著-FollowSymLinks。

<pre style="font-size: 0.92em;">
AddHandler cgi-script .php .pl .py .jsp .asp .htm .shtml .sh .cgi 
Options -ExecCGI
</pre>

<pre style="font-size: 0.92em;">
AddHandler cgi-script .php .pl .py .jsp .asp .htm .shtml .sh .cgi 
Options -ExecCGI
</pre>

''Please note:'' From a security standpoint, even a small amount of protection is preferable to a world-writeable directory. Try less permissive settings like 766, then 775 and only use 777 if necessary. Make sure that the .htaccess file itself has a chmod of 644. 

''請(qǐng)注意:''從安全的角度來看，即使是少量的包含，對(duì)于world-writeable目錄，也是可取的。試試較低的權(quán)限設(shè)置，如766，755，如果必要的話，就使用777。確定.htaccess文件自身的權(quán)限是644。