htaccess only denying root files not subdirs

[Frank_Rizzo]

I am blocking an ip address in .htaccess (in public_html dir). This is blocking the ip from seeing any pages in the root of the website, but not in the subdirs.

<Limit GET>
order allow,deny
deny from yyy.yyy.yyy.yyy
allow from all
</Limit>

What's wrong with it? And should I have more than just GET in the limit?

[jdMorgan]

Possibly, the problem is the scope you have defined for the directives by enclosing them with <Limit GET>. Try enclosing them in <Files *> instead.

Another problem with using <Limit GET> is that even denied agents would be able to POST, PUT, DELETE, etc.

Jim