blocking index.php but not other files in folder

[timgolding]

Hi i have two domains

http://domain.com

and

https://secure.domain.com

both run under the same document root however there is a folder inside the document root /ecommerce. Inside this folder is a file index.php i want to allow access to https://secure.domain.com/ecommerce but not to http://domain.com/ecommerce
There is however a snag. There are some other files inside the ecommerce folder that i do want to allow http://domain.com to access such as http://domain.com/ecommerce/page_jump.php. I also need the secure domain to be the only domain that has access to https://secure.domain.com/ecommerce/post_url.php So

https://secure.domain.com/ecommerce/
https://secure.domain.com/ecommerce/page_jump.php

are the files i want to restrict access from http://domain.com

and allow access to http://domain.com for anything else. Hope this makes sense.

[timgolding]

I did some research and think the best way to do this is block the entire folder under domain.com and allow the files i want to allow it to access. The secure.domain.com will be able to access everything in that folder

Something like?

    # No one needs to access this directly
    <Directory "/home/sites/domain.com/web/ecommerce">
       Order Deny,allow
       Deny from all
    </Directory>
    # But this file is OK:
    <Files "/home/sites/domain.com/web/ecommerce/page_jump.php">
       Order Deny,Allow
       Allow from all
    </Files>
    <Files "/home/sites/domain.com/web/ecommerce/return_url.php">
       Order Deny,Allow
       Allow from all
    </Files>

Won't be able to test this until i go live but i put it in if anyone can see anything wrong with this, please let me know!

[timgolding]

Doesn't work

[timgolding]

Got there i had to put the files inside the directory directive

# No one needs to access this directly
    <Directory "/home/sites/domain.com/web/ecommerce">
       Order Deny,allow
       Deny from all
        # But this file is OK:
        <Files "page_jump.php">
           Order Deny,Allow
           Allow from all
        </Files>
        <Files "return_url.php">
           Order Deny,Allow
           Allow from all
        </Files>
    </Directory>