This tutorial explains, how to disable HTTP methods for an apache web server.

Disable HTTP Methods in Apache

Create a “.htaccess” file under the document root directory and add the following code. Make sure that the Apache rewrite module and .htaccess are enabled. The above configuration will disable HEAD, PUT, DELETE, PATCH, TRACK, and OPTIONS methods. Next, restart the Apache webserver to apply changes.

Verify Setup

You can verify changes using the curl command line utility. Let’s send a request from your system to verify that the server accepts specific header requests. For example, the below command will send an “OPTIONS” request to the server. You will see a forbidden message in the result. This means that the Apache server rejected the OPTIONS request.


Hopefully, this article will help you disable the HTTP methods for your Apache webserver.