Apache Friends Support Forum

Hi Friends,

I developed a web portal that needs to be secure.

I wanted to do some thing similar to that of xampp protection to my own folder.

I named my folder as Version9, When ever a user accesses it he/she should be prompted for the username and password. Could you please hlep me out in solving this issue.

Thanks
sreekanth

Hi Boss,

I will try it out and get back to you.

And thank you so much for the post. Will this be useful for securing the website that is open to whole world ?

Sri

The security always depends on the used passwords. The system itself is very secure.

glitzi

Hi Glitzi,

I did what ever is said in the site.
But when I am trying to login it is not getting in to site. And I am seeing the following after 3 attempts

Authentication required!
This server could not verify that you are authorized to access the URL "/version9/". You either supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.

In case you are allowed to request the document, please check your user-id and password and try again.

If you think this is a server error, please contact the webmaster.

Error 401
aristotle.eng.auburn.edu
08/14/08 12:37:12
Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8h mod_autoindex_color


Please help me with this.

Thanks
sreekanth

OK, you should have created two files, .htacces and .htpasswd

Tell us where you put the two Files (in wich folder) and post the content of both files.

glitzi

Hi Glitz,

It is working. I am working on xampp in windows which uses MD5 authentication.

Got to use the htpasswd tool provided by apache. Thanks for that.

Thank you so much for helping me out.

Sri

Hey Glitz,

I got one more thing to implement with the software.

There are 2 modes in which my site will be accessed. Assume my site is hosted on server X.

First Mode:
=======
Directly through the server X's URL on which the site is hosted.

Second Mode:
=========
There is a redirection from another server Y to the server X on which my site is hosted.

Now I wish the second mode doesnot have to enter the password when it is being re directed to server X from the server Y.

Could you please tell me if it is possible in any way. Looking forward.

Thanks
sri

If it is a real redirection this is not possible, as Server X does not know where your Users are coming from. If Server Y is configured as a Proxy-Server, then satisfy is your Friend:

http://httpd.apache.org/docs/2.2/mod/core.html#satisfy

glitzi