How To .htaccess (Password Protected Webspace)

[PT_Richard]

First Read:

Using your People Telecom broadband customer home page webspace facility.

We have support .htaccess Auth overrides, so
here are some hints using groups (if you don't want groups then just use "require valid-user")

WEB-MAILBOX = the email account you associated as a webspace (do not include @people.net.au)

Live Webspace Path:

/swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/html/

* WEB-MAILBOX does not include ~ like the URL

Using Apache Tool to generate password file:

htpasswd -c -b .htpasswd fred bannanas

FILE CONTENT - /swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/.htpasswd

fred:FcYWgJ1GoG0ZA ***YES THIS IS ENCRYPTED, SEE BELOW INFO ***

FILE CONTENT- /swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/.htgroup

mates: fred

Access override control file:

FILE CONTENT - /swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/html/SOME-PROTECTED-DIR/.htaccess

AuthUserFile /swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/.htpasswd
AuthName "Login Required For SOME-PROTECTED-DIR"
AuthType Basic
Require valid-user

URL :EGhttp://home.people.net.au/~WEB-MAILBOX/SOME-PROTECTED-DIR


Quick N Easy online tool: http://www.webmaster-toolkit.com/hta...enerator.shtml

Ref: FORUM: htaacess protected area

http://www.htaccessmanager.com/

[PT_Richard]

Hi Simon,

I don't know of any such tool.

A perl script would do that .

What you would really want to do is use PERL or php talking to a database full of user / pass.

Richard

Try the following:

http://www.evrsoft.com/developers/to...enerator.shtml

If you can program in Perl look at this :
http://search.cpan.org/~bdfoy/Apache...ib/Htaccess.pm

A simple shell script will generate a htpasswd file with loads of users/groups.

Cheers,

Matt.

Ohh... take a look at this Windoze tool:

http://www.tlhouse.co.uk/HTAccessible.shtml

Also you might wish to search google

Cheers,

Matt.

[PT_Richard]

Hi Matt,

Im going to compile all this very usefull snippets to provide
a complete header post to this thread.

http://www.softpedia.com/public/cat/...0-8-7-24.shtml

Thank you !

Richard

Hi Richard,

Yeah that's a v.good idea!

I'm sure the users will find it most useful.
Well done you!

Cheers,

Matt.

Could someone please tell me if this looks OK???

.htaccess

AuthType Basic
AuthUserFile h**p://home.swiftdsl.com.au/10-DIGIT-ADSL#/~XXXXXX/.htpasswd
AuthGroupFile h**p://swiftdsl.com.au/10-DIGIT-ADSL#/~XXXXXX/html.htgroup
AuthName "Private"
require group mates

I have the above placed in my /html/images directory?


This .htpasswd is placed in the root directory /~XXXXXX along with the .htgroup
.htpasswd

XXXXXX:dx2HeVnhi6j4.

The problem I have is....I can get the logon window to come up but when I type in the username/password it won't let me get to that specific folder....../images
Login window just keeps popping up.

first time I've tried this so any advice would be great???

TIA

Yeah...

The problem you have is the definition of AuthGroupFile and AuthFile.

They are fully qualified paths to the file on the webserver... NOT a URL!

Change them to read something like:

/home/#ADSL_NUMBER/WEB-USER/ instead... all should then be good.

If the login keeps popping up... it's a sure sign that it has not worked if you have the user/password incorrect.

Cheers,

Matt.

i'm using microsoft frontpage 2002 and i'm wondering how to Password protect my webspace. Thanks in advance for any help

Read above..

This isn't a HTML editor issue..but something you need to do on the SERVER.
Has nothing to do with Frontpage.

Read the information above in this thread... it has all the information you require.

Good luck!

Regards,

Matt.

still dun understand...how do you get into the live webspace path and how to "do" something to the server, i'm so blur.

Use FTP.

Read above to use the tools above to create your password file.

Upload both .htaccess and htpasswd files as required.

Cheers,

Matt.

[MrShadow]

OK, I'm having some problems with my .htaccess file. Below is the contents:

DirectoryIndex fm.php

<Files .htaccess>
order deny,allow
deny from all
</Files>

I always get an Internal Server Error 500. I think it's with the DirectoryIndex line, as I removed the stuff to block .htaccess

Any suggestions? The file was:

Created in Textpad (with name New Text.txt)
Uploaded in ASCII mode
Renamed via WSFTP Pro to .htaccess

Thanks
Gaz

Actually it's probably ALL the lines.
Refer to the postings above. (You only need the settings for auth there... the rest will be done at the directory level for you.

I also create an index.php that just meta refreshes to the fm.php in this example.

So you can use http://my.space.swiftdsl.com.au/fm/ and it works.

Cheers,

Matt.

[MrShadow]

Hmm, thanks. I was hoping I wouldn't have to do that. Oh, well. I might just copy fm.php to index.php, as I've already linked to fm.php at various other places (and then realised I should have called it index.php. Mabey I should plan things better).

Use a recursive search and replace fm.php for index.php.

The .htaccess and the .htpasswd files I upload seem to disappear

I have uploaded using WSFTP and IE. The files initially appear, but when I refresh or re-get the directory listing the files disappear.

Bizzarrrreeee....

I have been trying to get basic user-password protection with no luck. The only reference seems to be the sketchy post in this forum. A more organised presentation with examples would be much better.

Cheers,

Any file that commences with a . (dot) in UNIX is seen as a 'hidden file' (Hmm. bit of a pun there! )

This is why you won't see it by default.

In a text based FTP client you can issue:

ls -a

to include hidden files in a listing.
Many graphical FTP programs also have an option to 'view hidden files'.

Cheers,

Matt.

Originally posted by mbottrell
In a text based FTP client you can issue:

ls -a

to include hidden files in a listing.

No on ftp.swiftdsl.com.au

ls
200 PORT command successful
150 Connecting to port 35246
Splitter.exe
index.html
phpMyAdmin
strata
226 4 matches total
46 bytes received in 0.0067 seconds (6.66 Kbytes/s)
ftp> ls -al
200 PORT command successful
150 Connecting to port 35265
226 0 matches total
ftp> ls -a
200 PORT command successful
150 Connecting to port 35290
226 0 matches total
ftp> dir
200 PORT command successful
150 Connecting to port 35312
-rwxr-----    1 14027    dslweb      59392 Jan 26 16:27 Splitter.exe
-rwxr-----    1 14027    dslweb         27 Sep 15  2003 index.html
drwxr-x---    7 14027    dslweb       4096 Jun  3 10:23 phpMyAdmin
drwxr-x---    4 14027    dslweb       4096 Jun  3 12:41 strata
226-Options: -l
226 4 matches total
270 bytes received in 0.46 seconds (0.57 Kbytes/s)

Don't use Windows's command line FTP ... it's brain dead...

You will get hidden listings using ls -al
See below:

OK. Current restricted directory is /
Logged in to ftp.swiftdsl.com.au.                                               
ncftp / > dir
drwxr-xr-x                May  4 23:35   html
ncftp / > ls -al
drwxr-x---    3 20637    dslweb       4096 May 12 10:44 .
drwxr-x---    3 20637    dslweb       4096 May 12 10:44 ..
-rw-------    1 20637    dslweb         11 May 12 10:44 .ftpquota
drwxr-xr-x    5 20637    dslweb       4096 May  5 07:35 html

Take a look at Core FTP It's free for the lite version and will let you see all these files as well it has a built in .htaccess/.htpassword editor.

Cheers,

Matt.

This just refuses to work for me:


.htaccess

AuthUserFile /swiftdsl/#########/~MAILBOX/.htpasswd
AuthName "Login:"
AuthType Basic
Require valid-user

This was placed in a empty directory.

.htpasswd

XXX:$apr1$Dv1.....$iv6wjRh55mrvvWVrb94Rb

This was placed in the root /~MAILBOX/ directory.

The login just keeps on popping up

Hello.

I'm still having trouble with the .htaccess file location using the format below:

/swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/html/

This is for a my 50MB web space account which is on the box domainweb.swiftel.com.au and with my registered domain name being hosted on it.

Is this format different if your domainname is hosted with Swiftel rather than the standard free space using the format above?

Luke

Originally posted by Luke200
Hello.

I'm still having trouble with the .htaccess file location using the format below:

/swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/html/

Did you sort it out? I want to upload a password protected DOCUMENTS folder.

Some SmartFTP tutorials on .htaccess: http://www.smartftp.com/support/kb/index.php/77

I'm checking 'em out now.

.htaccess password generator:
http://www.kxs.net/support/htaccess_pw.html

Who whoa! Looks like .htaccess is working for a "Documents" directory found here: http://home.swiftdsl.com.au/~cybernaut/

If you break in can you let me know how you did it and if there is a fix?

Thank you.

Hi Guys I have only just connected up with swiftel and I'm having trouble getting into my webspace, I used cuteftp pro to upload all the files and dir's that are needed to run my webpage and that worked like a charm

But when I go to access the website it cant be found ??? do I have to activate the webspace or is it just me having one of my days again LOL

thanks up front for any help guys

hey bullet,

did you create the 'html' directory in your webspace?
if not, you should create it in the root directory of your webspace.

and in answer to your question, no you do not need to activate your webspace. however, when you first created your email account for use with the webspace, did you make sure that your email acount is selected for use with the webspace account? if not, go to the configure mail of the members.swiftdsl.com.au section (you ahve to login) and select from the dropdown menu, the email account you want to use the webspace with.

hope i havent confused you

simmo inQ

Bullet,

You need to 'activate' your webspace in the 'members' area. Look under the Email accounts section. (confusing but true!)

So visit https://members.swiftdsl.com.au/

Once you have selected what account you want the webspace 'attached' to, you need to put all your html files in a directory called 'html' on the ftp://ftp.swiftdsl.com.au/ site.

Cheers,

Matt.

[edgr]

For anyone who is wondering (I had this problem myself and it took me a while to track it down), the fully qualified path does not need a tilda (~) in it.

[PT_Richard]

Live Webspace Path:

/swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/html/

is /swiftdsl/10-DIGIT-ADSL#/WEB-MAILBOX/html/ our full webspace path?

I have been reading the thread above and trying to figure out the steps to uploading .htaccess & /htpasswd files.

what goes in front of /swiftdsl/10 digit.......?

If I connect to ftp://username@ftp.swiftdsl.com.au am I in the root directory? I can see my website html folder ok.

Do I upload my .htpasswd file to this location?

How do I log in to create it directly using the -c -b coding as described above?

Thankyou for your guidance.

After much messing about, I figured out the path given above is wrong, and it should be something like this:

AuthType Basic
AuthName "My Secret Area"
AuthUserFile /swiftdsl/home/<your_phone_number>/<your_username>/html/.htpasswd
Require valid-user

I hope this helps others who spent far too long on something this simple.

And here's a web-based password generator:

http://www.4webhelp.net/us/password.php

Alison

[PT_Ryan]

Nice tool that you have found.


Regards,
Ryan.

Hi,

I'm one of PT's "Unwired" subscribers, and as such the <your_phone_number> part of the directory wont be applicable to me.

On my web space on PT's servers, what would I substitute the phone number with?


"AuthUserFile /swiftdsl/home/<your_phone_number>/<your_username>/html/.htpasswd"


Just a bit of background on what I've tried so far:

My .htaccess file:

AuthName "Secure Site"
AuthType Basic
AuthUserFile /html/secure/.htpasswd
Require valid-user

I also have my .htpasswd file under the same directory as the .htaccess.
I have a file named index.html under the /html/secure directory.

I have a main index.html under my /html/ directory. On this page, I have a link to my /html/secure/ directory. When there are no .htaccess files in use, the link works fine, and I can get to the index.html in the /html/secure/ directory.

After I upload the .htaccess and .htpasswd files into the /html/secure/ dirrectory, and then click the link to the "secure" page, I get prompted for a username and password, although it will not accept the credentials in the .htpasswd file.

I have tried 2 different .htaccess password generators, including the one linked above, but I still get stuck at this point.

Would this be related to the ADSL Service number part of the directory (which I don't have), or am I doing something wrong.

Any hints or further information would be appreciated.

Thanks.

[PT_Richard]

Originally Posted by Cryonics

Hi,

I'm one of PT's "Unwired" subscribers, and as such the <your_phone_number> part of the directory wont be applicable to me.

On my web space on PT's servers, what would I substitute the phone number with?


"AuthUserFile /swiftdsl/<your_phone_number>/<your_username>/html/.htpasswd"

I suggest:

/swiftdsl/(10-DIGIT-ADSL#) or (UNWIRED_USERNAME)/WEB-MAILBOX (<your_username>)/.htpasswd

As the below is in the live document root (typically files named .htpasswd are denied by server directives)

/swiftdsl/<your_phone_number>/<your_username>/html/.htpasswd

Regards,

Richard

Richard,

Your suggestion works.

Thankyou for your help.

[sts.cadcam]

I'm trying to use "ErrorDocument" and "Options -Indexes" on htaccess but it return me with 500 server error. is there some restruction on htaccess?

[lastminute]

Hi sts.cadcam,

From memory there is a restriction on what you can do with the .htaccess files. I believe PT put it down to a security issue.

Now on to my question: Why have all my attempts at .htaccess password protection failed? I have tried every possibility i can think off. Here is how my .htaccess file currently looks:

AuthName "Admin Only Area"
AuthType Basic
AuthUserFile /swiftdsl/home/<adsl num>/<user>/.htpasswd

require user admin

Can anyone see whats wrong with it? I have the .htpasswd file where the .htaccess file is pointing to, but it doesn't work. It pops up the pass word box fine when i go the directory i want to protect, but i can't log in.

Here's the .htpasswd file for reference:

admin:bUURLowOxwMEI

Thanks in advance.

EDIT: I have also tried putting the .htpasswd file in the html folder, but it made no difference.

[PT_Richard]

Require valid-user

[newUser]

I am trying to install Drupal (CMS) but whatever directory contains the .htaccess file gives me the "500 Internal Server Error" when I try to view it. The actual directory itself can also not be seen when it contains this file and I am viewing from my ftp program. Eg if I create a folder test1 and move .htaccess to that folder, the folder itself when not appear in ftp program. If I then move .htaccess to folder test2, test1 now becomes visible and test2 can not be seen.

Any ideas?

Thanks.