Htaccess deny specific get parameter

问题

I want to do deny access to specific ip. I tried this htaccess code but didn't worked:

<Files "index.php?action=deny">
Order Allow,Deny
Deny from XXXX
Allow from all
</Files>

where XXXX is an ip address. how can I do something like that, so it will deny only specific get parameter and not the whole file?

回答1:

Your pattern in Files directive is misleading. If you want to match the URL with action=deny query argument; you'd need to use <Location>:

<Location /index.php?action=deny>

回答2:

In 2.4, use to check the query string

<If "%{QUERY_STRING} =~ /action=deny/">
  Require all denied
</If>

In 2.2, use mod_rewrite:

RewriteEngine ON
RewriteCond %{QUERY_STRING} action=deny
RewriteRule index.php - [F]

回答3:

You can use this rule in your root .htaccess:

RewriteEngine On

RewriteCond %{QUERY_STRING} ^action=deny$ [NC]
#RewriteCond %{REMOTE_ADDR} =11.22.33.44
RewriteRule ^index\.php$ - [F]

Replace 11.22.33.44 with your actual IP address

来源：https://stackoverflow.com/questions/31903448/htaccess-deny-specific-get-parameter