Restrict access by IP address via .htaccess

Using .htaccess, you can allow access to a website, file, or directory only from selected IP addresses.

Important: always set Require all denied first, then allow specific IP addresses using Require ip ....

A) Restrict the whole website

In the root .htaccess file:

# Allow website only from one IP
Require all denied
Require ip 213.81.175.210

# If you need to allow multiple IP addresses:
Require all denied
Require ip 1.2.3.4 111.222.333.444

B) Restrict only a specific file (for example xyz.php)

If you want to restrict only one file (and not the whole website), put this into .htaccess:

<Files "xyz.php">
Require all denied
Require ip 1.2.3.4
</Files>

C) Restrict only a specific path/directory (for example /admin)

Create (or edit) an .htaccess file inside the /admin directory:

Require all denied
Require ip 1.2.3.4

Note: replace sample IP addresses with your own allowed IP addresses.