Website Password Protection

You can password protect directories of your web site, so only users with a given username and password can access that directory and files within it. The most popular method used is HTAccess, as described below.

Single User Protection:

1. Create the directory you want to password protect in your www (example: members)
2. Create a file .htaccess in that directory that looks like:

   AuthUserFile /usr/sites/username/.htpasswd
   AuthGroupFile /dev/null 
   AuthName ByPassword 
   AuthType Basic 
   
   
   <Limit GET> 
   require user myfriend 
   </Limit> 
   

   Important! Replace AuthUserFile path with REAL path to your login directory!
   
3. Create the password file in your login directory using the program htpasswd To do this, log into your account via SSH and type:

   /usr/local/apache/bin/htpasswd -c .htpasswd myfriend

4. When prompted, enter the password for that user.
5. Now try to access a file in the protected directory by entering the set username and password when prompted for it.

Multiple User/Group Protection:

1. Create your directory in www (example: members), to contain the protected files.
2. Create a file .htgroup in your login directory that contains the group name and list of users:

   members: user1 user2 user3 

3. Modify .htaccess, so it looks like:

   AuthUserFile /usr/sites/username/.htpasswd 
   AuthGroupFile /usr/sites/username/.htgroup 
   AuthName ByPassword 
   AuthType Basic 
   
   <Limit GET> 
   require group members 
   </Limit> 
   

   
   Important! Replace AuthUserFile path with REAL path to your login directory!
4. Create the password file .htpasswd using the program htpasswd for each user (as above in part 1). You don't need the -c option if the file .htpasswd already exists (-c is used to create a new file).

   /usr/local/apache/bin/htpasswd .htpasswd user1 
   /usr/local/apache/bin/htpasswd .htpasswd user2
   
   and so on...

5. Remember to add any new users to the .htgroup file.
6. Now try to access a file in the protected directory by entering the set username and password when prompted for it.

Keep in mind that: 1. all files should have a blank line at the bottom and 2. always use the full path to your configuration files.

For further details, please refer to the Apache mod_auth docs

	Home	Help	Hosting	Privacy	Software	Contacts	Map	About	Humor	You have a friend @Webby !
Copyright © 1995-2007 Webby, Inc.
on server # 30T727

[ Close Alert ]

ALERT If you received a phony postcard pick-up notice, claiming to be from a family member, or other vague source, then that is just an illegal spoof and NOT from us. Just like Elvis, Ebay and PayPal, we too suffer from impersonators. Such is the price of fame. Mypostcards.com sells postcard SOFTWARE, but does NOT send postcards. Do not click on anything in the spoof. Just dump it. Since your spoof did not come from us, we can not unsubscribe you from anything. You can send the spoof to the Spamcops at http://www.spamcop.net/ They will analyze it and show you where it really came from. How to recognize a spoof

[ Close Alert ]