I need a HTACCESS pro ! (I pay with paypal)

**pythonx** · 08-08-2010, 08:44 AM

15 min job? You could have done it by the time you typed this post.

**V_RocKs** · 08-08-2010, 08:48 AM

Would make much more sense then to redirect them through your login page which I assume will be in PHP or ASP.

**V_RocKs** · 08-08-2010, 08:49 AM

BTW, I just used customer service with Epassporte and I have to say, they have definitely been doing a much better job as of late!

**borked** · 08-08-2010, 11:36 AM

Add this to the header file after autnetication

Code:

if ( isset( $_SERVER['PHP_AUTH_USER'] ) ) {
  $banned_users = file( '/www/path/website/ban.dat' );
  if ( is_array($banned_users) ) {
    foreach ($banned_users as $user) {
      if ( $user == $_SERVER['PHP_AUTH_USER'] ) {
         header( "Location: http://www.domain_name.com/ban.htm?" . $_SERVER['PHP_AUTH_USER'] );
      }
  }
}

**CHMOD** · 08-08-2010, 12:17 PM

Originally posted by borked

Add this to the header file after autnetication

Code:

if ( isset( $_SERVER['PHP_AUTH_USER'] ) ) {
  $banned_users = file( '/www/path/website/ban.dat' );
  if ( is_array($banned_users) ) {
    foreach ($banned_users as $user) {
      if ( $user == $_SERVER['PHP_AUTH_USER'] ) {
         header( "Location: http://www.domain_name.com/ban.htm?" . $_SERVER['PHP_AUTH_USER'] );
      }
  }
}

Thanks for the hint !

But I can allready write in PHP.
For some reasons, I need it absolutely in a htaccess file.

**Varius** · 08-08-2010, 12:36 PM

You can redirect on specific usernames in htaccess by hard-coding rules for them, but I don't believe htaccess would have a way to read them from a file for this purpose.

**TisMe** · 08-08-2010, 06:33 PM

I've always gone to Ray, creator of Strongbox for help with htaccess stuff.

You can email him at: support AT bettercgi DOT com

**borked** · 08-08-2010, 10:20 PM

Varius is correct - htaccess cannot prepend/append files, so your only way is to prepend the htaccess file with the list of banned users as this format:

setenvif remote_user "username1" banned
setenvif remote_user "username2" banned

so that in htaccess, you have something like this:

Code:

##BANNED USERS##
setenvif remote_user "username1" banned
setenvif remote_user "username2" banned

AuthName 'My Protected Area'
AuthType Basic
AuthUserFile /home/var/etc/.htpasswd (or authmysql if you're using that)


<Files *>
deny from env=banned
</Files>

if you add the
##BANNED USERS##
line, you can have a script automatically update your htaccess by replacing

##BANNED USERS##

with
##BANNED USERS##
setenvif remote_user "username3" banned

that should take care of things

**borked** · 08-08-2010, 10:23 PM

see http://www.htaccesselite.com/setenvi...les-vt141.html

**darksoul** · 08-08-2010, 11:15 PM

I guess you're looking for RewriteMap
but this can only be used in server config and virtual host directives
basically you'd need access to the apache config file.

**CHMOD** · 08-09-2010, 01:08 AM

Originally posted by borked

Varius is correct - htaccess cannot prepend/append files, so your only way is to prepend the htaccess file with the list of banned users as this format:

setenvif remote_user "username1" banned
setenvif remote_user "username2" banned

so that in htaccess, you have something like this:

Code:

##BANNED USERS##
setenvif remote_user "username1" banned
setenvif remote_user "username2" banned

AuthName 'My Protected Area'
AuthType Basic
AuthUserFile /home/var/etc/.htpasswd (or authmysql if you're using that)


<Files *>
deny from env=banned
</Files>

if you add the
##BANNED USERS##
line, you can have a script automatically update your htaccess by replacing

##BANNED USERS##

with
##BANNED USERS##
setenvif remote_user "username3" banned

that should take care of things

Ultimatly, I could use this solution...
I'll try to see if it work !

But I would still prefer to have the banned names in an external flat file.

**CHMOD** · 08-09-2010, 01:09 AM

Originally posted by darksoul

I guess you're looking for RewriteMap
but this can only be used in server config and virtual host directives
basically you'd need access to the apache config file.

Yes I have found this solution too...

But I really need this to be coded in the htaccess file.
And not in apache itself.

**raymor** · 08-09-2010, 06:38 AM

[QUOTE=CHMOD;17400259]
If possible, when the user authenticate, I would prefefer to use my own login page instead of the default pop up window. I want to use strictly http authentication./QUOTE]

Those are two opposite statements, so both can not be true. I noticed a few other significant
misunderstandings in your posts, so you might consider using a professionally designed
and very well tested system rather than trying to design this yourself.

I need a HTACCESS pro ! (I pay with paypal)

I need a HTACCESS pro ! (I pay with paypal)

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment