|
switching to a 'script-based' authentication model instead of 'server-based (straight .htaccess -> .htpasswd), will solve this problem... people will be forced to go through a login gateway that relies on a script to call to .htpasswd, and i don't believe it can be crossed by user:pass@host login attempts... pw sentry uses a script-based auth model, i highly recommend it..
|