Celebrating 20 years online :)
Web Dev + WordPress + Security

htaccess Redirect to Maintenance Page

Redirecting visitors to a maintenance page or other temporary page is an essential tool to have in your tool belt. Using HTAccess, redirecting visitors to a temporary maintenance page is simple and effective. All you need to redirect your visitors is the following code placed in your site’s root HTAccess:

<IfModule mod_rewrite.c>
 RewriteEngine on
 RewriteCond %{REMOTE_ADDR} !^123\.456\.789\.000
 RewriteCond %{REQUEST_URI} !/maintenance.html$ [NC]
 RewriteCond %{REQUEST_URI} !\.(jpe?g?|png|gif) [NC]
 RewriteRule .* /maintenance.html [R=302,L]

That is the official copy-&-paste goodness right there. Just grab, gulp and go. Of course, there are a few more details for those who may be unfamiliar with the process. Let’s look at all the gory details..

Redirecting Traffic with HTAccess

To redirect your visitors to a maintenance page, place the previous code into an HTAccess file located in your site’s root directory. This will ensure that all pages and resources contained within your domain will be redirected for visitors. Thus, if you would like to redirect only requests for a specific subdirectory within your domain, the .htaccess file containing these rules would be placed in that directory (instead of root).

Now that the HTAccess is in place, you’ll need to create and upload your maintenance page, named “maintenance.html”, to the root directory of your site. This file can be just about anything, and does not need to be written in HTML. You can use, say, PHP to make it all dynamic, but remember to change the two instances of the file name in the HTAccess code to match the actual name of your file.

Code Explanation

  1. The first line is merely a comment to explain the purpose of the code. It is not processed by the server.
  2. The second line enables Apache’s rewrite engine, mod_rewrite. Depending on your server setup, this line may be unnecessary.
  3. The third line checks to see if the request is coming from your computer. If it is, then the redirect does not happen. For this to work, you need to change the numbers in this line to match your own IP address.
  4. The fourth line prevents an infinite-loop scenario by testing the request against the name of your maintenance page. Obviously, we don’t want to redirect requests for the page to which we are redirecting.
  5. The fifth and final line contains the action. It basically redirects all requests that meet both of the previous rewrite conditions to the specified maintenance page. Apache doesn’t allow us to use 500-level response codes, so we are stuck with the next best thing, a 302 – temporary – response.

Update: Multiple IP Addresses

It was asked in the comments how this might work when you want to allow multiple IP addresses. There are basically two ways. First, you can add more RewriteConds to the previous code, like so:

<IfModule mod_rewrite.c>
 RewriteEngine on
 RewriteCond %{REMOTE_ADDR} !^123\.456\.789\.000
 RewriteCond %{REMOTE_ADDR} !^123\.456\.789\.000
 RewriteCond %{REMOTE_ADDR} !^123\.456\.789\.000
 RewriteCond %{REQUEST_URI} !/maintenance.html$ [NC]
 RewriteCond %{REQUEST_URI} !\.(jpe?g?|png|gif) [NC]
 RewriteRule .* /maintenance.html [R=302,L]

With this method, edit each IP address to match your own, and add/remove as many IPs as needed. The second method is equally effective, and looks like this:

 Order Deny,Allow
 Deny from all
 Allow from 123.456.789.000
 Allow from 123.456.789.000
ErrorDocument 403 /maintenance.html
<Files maintenance.html>
 Order Allow,Deny
 Allow from all

This method is a bit simpler, but not as good for SEO should the search engines visit while in maintenance mode. The first method sends a 302 - Moved temporarily status code, while the second sends a less accurate 403 - Forbidden status code. Even so, should you go with method #2, edit the IPs to those of your own, adding or removing new lines as needed for site access.

It’s like a Pandora’s Box..

It’s difficult to keep posts short and sweet when working with HTAccess techniques. There is just so much that you can do with it. For example, we can do htaccess password-protection, allow access to multiple visitors, request specific redirects, and much more. But I refrained from complicating things in an effort to keep this post focused and on-topic. Nonetheless, there is always room for improvement, so if you see something that could make this simple HTAccess-redirect technique even better, then please share via the comments. Thanks!

Further reading

About the Author
Jeff Starr = Web Developer. Book Author. Secretly Important.
BBQ Pro: The fastest firewall to protect your WordPress.

60 responses to “htaccess Redirect to Maintenance Page”

  1. Patricia, Thanks for the great feedback :)

  2. You’re certainly welcome, Jeff. With a long history of IT in my background, I hate when there’s something like this that’s so simple that I’m just discovering.

    Hope you get a lot of new hits soon. Not only have I sent this link to a few web developers and friends, but I’m about to tweet it from @Nixon_VS shortly. Keep an eye out!

    You’ve got some great useful content here! Tweet ya later!

  3. You might want to change this line:
    RewriteCond %{REQUEST_URI} !.(jpe?g?|png|gif) [NC]

    into this:
    RewriteCond %{REQUEST_URI} !.(jpe?g?|png|gif|css) [NC]

  4. How do you allow more than 1 IP to access the site? Do I just add 1 more line of RewriteCond %{REMOTE_ADDR}?

  5. Yup, you can just add another line like that :)

  6. When I paste this into my .htaccess file inside of my WordPress sub-directory all seems well, except I can not longer view posts. Whenever I try to access a post during “maintenance mode”, I receive a 404 File Not Found error. When I remove the code suggested above, everything works again. Is this normal behavior?

  7. Sorry, my mistake. I’d removed the initial code instead the default .htaccess in the WP directory…restoring it and adding the code about worked.


  8. Hi Jeff, thank you very much for this.

    Although the IP address is nice for me to view the site, I would prefer to have a subdomain instead but I’m not having any luck.

    Is it possible to use this redirect for the main domain.com & www.domain.com and then use a subdomain e.g. dev.domain.com to show the site as normal?

    I tried adding RewriteCond %{HTTP_HOST} !^dev\.domain\.com$ [NC]
    as an extra condition which bypasses the maintenance mode page, however, instead of loading the home page of the site it’s loading my servers default index page.

    Oh well, I just thought it would be more flexible to have a subdomain as a bypass rather than the ip address… clearly I am still learning the ins and outs of htaccess.


  9. Hi, How do I redirect multiple pages to the maintenance page and not just the index page?

    mydomain.com to mydomain.com/maintenance.php
    mydomain.com/member.php to mydomain.com/maintenance.php

    I need to add 2 pages to redirect to maintenance page. Or is it possible to just redirect all of my site’s pages to the maintenance page?

    Hope you could help me.


  10. Jeff Starr 2011/09/07 8:06 am

    Hi Randolph, I’m pretty sure that’s what the code presented in the article does for you – redirects all requests (except for images and the maintenance page itself) to the maintenance page. Check the article for more information.

  11. You’ve just saved my life! I was banging my head on the wall to make this work, and after I found your post, and pasted the code, it worked straight away! THANK YOU !

  12. that worked fine, in google result another websites post is displayed first but that solution not working, cause that code block images also, this worked fine for a construction page. thanks :)

Comments are closed for this post. Something to add? Let me know.
Perishable Press is operated by Jeff Starr, a professional web developer and book author with two decades of experience. Here you will find posts about web development, WordPress, security, and more »
Banhammer: Protect your WordPress site against threats.
Crazy that we’re almost halfway thru 2024.
I live right next door to the absolute loudest car in town. And the owner loves to drive it.
8G Firewall now out of beta testing, ready for use on production sites.
It's all about that ad revenue baby.
Note to self: encrypting 500 GB of data on my iMac takes around 8 hours.
Getting back into things after a bit of a break. Currently 7° F outside. Chillz.
Get news, updates, deals & tips via email.
Email kept private. Easy unsubscribe anytime.