htaccess on CCGI (MediaWiki)

[#1]

We've been trying to follow the instructions for securing MediaWiki images at
http://www.mediawiki.org/wiki/Manual:Image_Authorization#Apache_Instructions_without_PATH_INFO_with_...
on CCGI.  Unfortunately we've had a problem with denying access to pages; the .htaccess file with "deny from all" does not work.  PNG files are happily still served by the server (note this is not the PHP problem others have mentioned and we've also tried added an "order" statement).  We know the htaccess file is being read as if we put a corrupt entry in the file we get a "500 Internal Server Error".
Any ideas?
Thanks,
epitrope.

[#2]

Posting the relevant contents (masking any domains etc if you want) of your .htaccess may help as we have no idea what you have done.

[#3]

I'm afraid it's nothing exciting at all - our .htaccess contains only
deny from all
As mentioned above the .htaccess is definitely being read as corrupting the files gives an internal server error - I guess this is similar functionality to "deny from all" but doesn't seem the right way to do things!
Thanks,
epitrope.

[#4]

Unfortunately blocking access with .htaccess won't work for php on our CGI platform, as we don't use the Apache mod_php extension but run php scripts as CGI. This means that apache specific settings such as those found in .htaccess are not honoured.

[#5]

Sorry to differ. Blocking access with .htaccess will work on CCGI. It's only PHP-specific settings that aren't honoured, not Apache directives in general.
Try something like:

<FilesMatch "\.(htaccess|htpasswd|ini|phps|fla|psd|log|sh|pem|txt|png)$">
  Order Allow,Deny
  Deny from all
</FilesMatch>
IndexIgnore *

Gabe

[#6]

Great - that worked fine.  Wouldn't have guessed the requirement to include the FilesMatch section!
Thanks,
epitrope.