How to avoid apache allow download certain files?

Question

How to avoid apache allow download certain files? (for example .py and .sh)

I want to avoid files to be served and downloaded like

www.site.com/file.sh
www.site.com/file.py

but I've tried to do this

<Files ~ "^\.sh">
   Order deny,allow
   deny from all
</Files>

<Files ~ "^\.py">
   Order deny,allow
   deny from all
</Files>

also this

<FilesMatch "\.(sh|py)$">
   Order deny,allow
   deny from all
</FilesMatch>

Nothings seems to work, I've tried to put the file in

/etc/apache2/apache2.conf

also

/etc/apache2/sites-available/default

Nothing works, apache still let me download the files.

Answer 1

Your file match clauses seem to be incorrect.

<Files ~ "^\.py">

will match files whose names will start with characters .py. You'll want

<Files ~ "\.py$">

instead.

But your FilesMatch regular expression looks correct. So maybe the problem lies elsewhere. Perhaps your Apache uses the new-style access control directives only?

Try replacing the old-style

Order deny,allow
deny from all

with the new-style equivalent:

Require all denied