Comments on Password Protect a Directory with .htaccess - ILoveJackDaniels.com

Comment on Password Protect a Directory with .htaccess

2008-03-01T17:49:18+00:00

Comment by Sean ( http://www.lumidev.com )

So I'm confused ... was #8 saying htaccess does not really protect directories or just that it isn't the preferred way of doing it. I found this article by googling "how safe is htaccess for password protection." Now that I re-read it, I'm thinking he meant the latter, but I'm just not sure.

Comment on Password Protect a Directory with .htaccess

2008-02-05T09:00:48+00:00

Comment by Alan ( http:// )

"In general, you should never use .htaccess files unless you don't have access to the main server configuration file. There is, for example, a prevailing misconception that user authentication should always be done in .htaccess files. This is simply not the case. You can put user authentication configurations in the main server configuration, and this is, in fact, the preferred way to do things."

The Apache Software Foundation.

This doesn't work by default; the server admin has to edit httpd.conf to allow it.

Comment on Password Protect a Directory with .htaccess

2008-01-26T04:21:08+00:00

Comment by Judie Schechter ( http:// )

The code worked great. But, once I am signed in - it seems I never have to sign in again unless I quit out of the browser and launch it again. It can be hours or days and I am still able to get to the protected file after the initial username and password is input.

Is there a way to set up a timeout feature so that if you are away from the page for 10 minutes (for example) then you have to sign back in?

Comment on Password Protect a Directory with .htaccess

2008-01-25T18:23:24+00:00

Comment by Albert ( http:// )

Tried this tutorial. Didn't work at all.......
Wonder why it doesn't. Not even a pop-up menu apears.

gr,

Albert

Comment on Password Protect a Directory with .htaccess

2008-01-07T20:34:30+00:00

Comment by realety ( http:// )

Finally a password generator that works! :) Thank You!

Comment on Password Protect a Directory with .htaccess

2007-11-20T03:27:17+00:00

Comment by Vincent Bray ( http://httpd.apache.org/docs-project/ )

@nev

There's nothing stopping people from using htaccess files for password protection, of course. My issue is just that many people get confused about two issues in particular: htaccess files are only for password protection, and: to configure password protection you need to use htaccess files. Neither is correct, but very few tutorials point that out. Whenever possible, this kind of configuration should go in the main config file, allowing the server to run faster (no need to look for htaccess files in every directory leading up to the current one for every request), and keeping configuration together in one place.

Maybe No, no, no! was overdoing it :-)

Comment on Password Protect a Directory with .htaccess

2007-11-15T01:35:13+00:00

Comment by Jonathan ( http:// )

I created my .htaccess and .htpasswd files following the instructions found here: (http://help.godaddy.com/article.php?article_id=1641&).

I just tried to use your godaddy specific encryption link #33 but it is still not working...

Comment on Password Protect a Directory with .htaccess

2007-11-14T23:42:26+00:00

Comment by gld ( http://www.virtualfulcrum.net )

It seems to me that the encryption can be server-specific. I could not get passwords to work until I put a password-encryption page on my site's server: http://www.virtualfulcrum.net/projects/Web/godaddy_passwd.php

Comment on Password Protect a Directory with .htaccess

2007-11-14T07:36:20+00:00

Comment by Jonathan ( http:// )

Im having the same problem as #28. I've tried everything I can think of and read at least 20 tutorials on the subject so far but no matter what I do when I enter my username and password it tells me the password is incorrect. Please someone help.

Comment on Password Protect a Directory with .htaccess

2007-11-12T21:56:31+00:00

Comment by LoLo ( http://www.loloz.net/ )

more informations :
http://httpd.apache.org/docs/2.0/howto/htaccess.html