password protecting directories

[Nick]

From faq's:

At this time, PowWeb does not support password-protected directories. We will be this feature to our package within the next 30 – 45 days.

Is this option available now.

Not sure when the queston was answered. Would like to use the htaccess method, if possible. I tried it and it pops up the the box ok, but won't accept the password.

Any help?

[fcsnc]

It works here. See this post (http://forum.powweb.com/showthread.php?s=&threadid=689).

[Nick]

Okay, I ran that. Same result. Login fails. The only thing this script does is write the server path for the password file for you so that you don't have to guess at it. Everything is exactly as I had already done it, so I'm not sure what else to try.

Any ideas?


BTW, this comprehensive guide to htaccess covers this topic and a few more related to htaccess. It explains not only what to do, but some of the why you are doing it, too. Very helpful.

http://wsabstract.com/howto/htaccess3.shtml

I've gone through all the steps, triple checked to be sure that I upload correctly in ascii, have the path name correct, type the name and password exact, etc . . .

Still not right, somehow. I'm stumped.


: (

[fcsnc]

You don't think it works? Try this:

http://www.fcsnc.com/drivers/README.txt

username: vootie
password: youwish

I did this about 5 minutes ago with the link I gave you. Read the directions, and you will be successful.

[tcjay]

I am trying to password protect MyAdmin. I have read the tutorials and created an .htpasswd. It is up on the server.............but I can log in without any prompt for the password. :( What am I doing wrong? It seems like I am missing a step.

[Tubba]

As well as the .htpasswd, you need a .htaccess in whatever you want to protect. Put the following in it:

AuthUserFile /www/wherever/your/htpasswd/is/.htpasswd
AuthName "The 'enter passowrd' prompt"
AuthType Basic
Require valid-user

And it should work.

[fcsnc]

If you are going to use .htaccess to "password-protect" directories in your site, the password string must be constructed (calculated, whatever you want to call it) on your Powweb server. You can't just run any old script anywhere on your home Linux box or whatever to come up with your encrypted password, upload it to your Powweb account, and expect it to work.

The EZPass script (http://www.croesusdesign.com/pass.html) I passed on to you is one way to do this. I don't know of a simpler way.

Caution 1: If you are using your own or third-party packages like news posters, discussion boards, etc. on your site and don't know how they work exactly, be careful fooling with .htaccess files. Your package may use those for its own purposes. Your package may interfere with your ability to use .htaccess for your purposes. Editing .htaccess files on your own may break your package.

Caution 2: About half of Powweb's clients are FrontPage users. If you use FrontPage to publish your site using the FrontPage extensions, then use only supported FrontPage features for your site management. FrontPage can break--or be broken by--third-party scripts and/or low-level files that conflict with the Microsoft FrontPage view of the world.

[Ddr]

You mean Microsoft has its own way of looking at the world?

*falling over stunned*


Dale
the guy with the rose colored glasses

[SimCoWeb]

Here's a great .htaccess utility that I use all the time. It's a freebie, too.

http://www.highlandmedia.com/Downloads/LockIt.shtml

[Ddr]

I use Lockit, too, but it will not allow more than one user/password set in the .htpasswd file. It does not have the ability to append the ht.passwd file to create a list of multiple users with different names and passwords.

If that is what someone is trying to do, then ezpass is probably a good one to learn

Dale

[Nick]

I've still not been able to get this to work.

I followed every step outlined in the EZPass method as carefully as I know how.

It won't accept the password.

I'd really like to get this to work, not because I really need it for anything per se, but because I want to know how to do it.

Any further help would be appreciated.

Thanks.

[fcsnc]

Nick,

I will try to help you offline if you would like.

[Nick]

Thank you, Tom. Come on over.

:-p)


or,

e-mail me.

oldsaintnick@hotmail.com

[Nick]

For anyone who may be interested in avoiding the same hang-up that I encountered in trying to set up the htpasswd file with an encrypted password, don't include any blank linespaces in the file. Only the info line for each username / password can be included. Adding an empty linespace at the end will cause it to fail.



Thank you Tom for your generous assistance!

[fcsnc]

No prob Nick, I love to see people succeed.

[Tresclub]

I just installed password protection for my 'phpMyAdmin' folder.
The installation was a piece of cake because of fcsnc and Tubba.

fcsnc... For this invaluable link:
The EZPass script (http://www.croesusdesign.com/pass.html) I passed on to you is one way to do this. I don't know of a simpler way.

Tubba... For this invaluable tip:
As well as the .htpasswd, you need a .htaccess in whatever you want to protect.

I got the ezpass.cgi file created and uploaded to my cgi-bin folder. Called the file, and got the two .ht files created, and uploaded to my 'secret' folder. Tried to access my phpMyAdmin file, but got the 500 INTERNAL SERVER ERROR because I had forgot to delete the '-T' from the #!/usr/local/bin/php line that I copied/pasted from the EZ-Pass website. Tried it again, but this time the page wasn't found, because I had not uploaded the two files to the folder I wanted protected.

Thank you both for these great suggestions!

[VSAngela]

Maybe you guys can help me out...

I used EZPass to work out my .htaccess and .htpasswd files. I uploaded them to my "private" directory (along with the file I want password-protected) and typed the page URL into my address bar.

I was prompted for my username and password, but when I enter the information, I'm thrown into a loop. No matter how many times I enter the correct username and password, I'm prompted for it again.

I've checked that I don't have any extra lines in my .htpasswd (not hard to do, considering it's only one line), and I've redone my .htaccess just to make sure there wasn't something wrong there.

Any thoughts?

[Ddr]

I would start over again by deleting the htaccess and htpasswd files with my FTP application and trying again. Maybe something was corrupted or uploaded in binary instead of a ASCII....who knows, but it is simple enough to just try again.

Hope that helps.


Dale

[VSAngela]

Nope, still no good. :( I even re-ran EZPass and recreated my .htaccess and .htpasswd, then made sure they were uploaded in ASCII. Now it's not prompting me at all, not even when I refresh the page. *sigh*

(At least now I know my custom 401 error page works...)

[MannInc]

You can try using the Pass Protection Tutorial at the Unofficial PowWeb Support (http://pwsupport.manninc.com) site.

Hope this helps!

[VSAngela]

Tried that already, too. :)

[Ddr]

are you uploading using FrontPage?

[MannInc]

Try uploading the files under Automatic, instead of ASCII, as these files don't need to be uploaded in ASCII.

If you're trying to upload them via FP, try using an FTP program instead.

Hope this helps!

[VSAngela]

Ddr - Nope, uploading using WS_FTP. I don't even *have* FP... ;)

MannInc - *smacks forehead* Uploading in binary seems to have done the trick... :D Should've used the "auto" checkbox a long time ago.

Thanks for your patience, guys. :)

[MannInc]

Glad you got it working. I've heard of people do both of the following:

1) uploading in ASCII
2) Trying to CHMOD (or change settings for) the .htacess file.

Therefore, I've added a note to upload this and .htpasswd under Auto mode on the Pass Protection page under U.P.S.