htaccess help. - GoFuckYourself.com

InsaneGreen · 10-16-2003, 02:17 PM

the htaccess for my members area is setup to check for a password, how can i make it allow certain domains access without prompting the user for a password? thanks in advance to anyone that can help!

caspuh · 10-16-2003, 02:20 PM

put your files in distinct folders. use multiple htaccess files, one for each directory that you need password protected. for instance:

/free (dont have an htaccess)
/teen (have one)
/gay (have one)
/free-movies (dont have one)

wherever you put the htaccess will affect all subdirectories.

EZRhino · 10-16-2003, 02:20 PM

Set up a allow list for particular domains.
Read Oriley and Associates "Apache"
Good info there or do a google search for "htaccess+howto"

timboss · 10-16-2003, 02:29 PM

I think what your asking is how to allow access from a certain referring URL?

is that it? when you come from a certain URL, you would not be prompted for a password?

you need referrer type set up in your http.conf file

InsaneGreen · 10-16-2003, 02:32 PM

Quote:

Originally posted by timboss
I think what your asking is how to allow access from a certain referring URL?

is that it? when you come from a certain URL, you would not be prompted for a password?

you need referrer type set up in your http.conf file

thats what i want, but if its not a url i specify i want it to prompt for a password...

NetRodent · 10-16-2003, 02:37 PM

I trust you are aware that this is a massive security hole and will break most anti-password sharing scripts.

InsaneGreen · 10-16-2003, 02:43 PM

netrodent,
then how does everyone else do it? i just want my members to be able to access the member area to all 7 of my sites...

myneid · 10-16-2003, 03:46 PM

if you have teh setenv module loaded which most apaches do by default you can do

SetEnvIf Referer "^http://www.mydomain.com" myrefallow

order deny,allow
deny from all
allow from env=myrefallow
Satisfy Any

and leave in there your other Auth lines and do the SetEnvIf line for each refering url you want to allow

this is a security hole as anybody can fake their referring url and they do.

the best way to do waht you want to do is to get a programmer or sysadmin set up your system the way you want

NetRodent · 10-16-2003, 03:55 PM

Quote:

Originally posted by InsaneGreen
netrodent,
then how does everyone else do it? i just want my members to be able to access the member area to all 7 of my sites...

There are a couple ways:
1. Use a common members area divided up so it looks ike multiple sites.
2. Use session based authentication (my personal favorite).

tantalising · 10-16-2003, 04:03 PM

You can also try:

Satisfy Any
AuthType Basic
AuthName "Members Area"
AuthUserFile /path to your .htpasswdfile
AuthGroupFile /dev/null
<Limit GET POST>
require valid-user
order deny,allow
deny from all
allow from 64.62.200.131
</Limit>

In this case it would allow visitors coming from
arnoldschwarzenegger.com to visit your protected area

Still as previous poster said a security hole.

..

PbG · 10-16-2003, 06:29 PM

This is your best bet.

Quote:

Originally posted by NetRodent

There are a couple ways:
1. Use a common members area divided up so it looks ike multiple sites.
2. Use session based authentication (my personal favorite).

10-16-2003, 02:17 PM	#1
InsaneGreen Confirmed User Join Date: Aug 2003 Location: southern california Posts: 996	htaccess help. the htaccess for my members area is setup to check for a password, how can i make it allow certain domains access without prompting the user for a password? thanks in advance to anyone that can help! __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

10-16-2003, 02:20 PM	#2
caspuh Registered User Join Date: Oct 2003 Posts: 56	put your files in distinct folders. use multiple htaccess files, one for each directory that you need password protected. for instance: /free (dont have an htaccess) /teen (have one) /gay (have one) /free-movies (dont have one) wherever you put the htaccess will affect all subdirectories. Last edited by caspuh; 10-16-2003 at 02:22 PM..

10-16-2003, 02:29 PM	#4
timboss Confirmed User Join Date: Sep 2003 Location: South Florida Posts: 627	I think what your asking is how to allow access from a certain referring URL? is that it? when you come from a certain URL, you would not be prompted for a password? you need referrer type set up in your http.conf file __________________ ICQ: 338637464

10-16-2003, 02:37 PM	#6
NetRodent Confirmed User Join Date: Jan 2002 Location: In the walls of your house. Posts: 3,985	I trust you are aware that this is a massive security hole and will break most anti-password sharing scripts. __________________ "Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats." --H.L. Mencken

10-16-2003, 02:43 PM	#7
InsaneGreen Confirmed User Join Date: Aug 2003 Location: southern california Posts: 996	netrodent, then how does everyone else do it? i just want my members to be able to access the member area to all 7 of my sites... __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

10-16-2003, 02:20 PM	#3
EZRhino Confirmed User Industry Role: Join Date: Jul 2003 Location: couch Posts: 6,258	Set up a allow list for particular domains. Read Oriley and Associates "Apache" Good info there or do a google search for "htaccess+howto"

10-16-2003, 03:46 PM	#8
myneid Confirmed User Industry Role: Join Date: Jan 2003 Location: Los Angeles Posts: 736	if you have teh setenv module loaded which most apaches do by default you can do SetEnvIf Referer "^http://www.mydomain.com" myrefallow order deny,allow deny from all allow from env=myrefallow Satisfy Any and leave in there your other Auth lines and do the SetEnvIf line for each refering url you want to allow this is a security hole as anybody can fake their referring url and they do. the best way to do waht you want to do is to get a programmer or sysadmin set up your system the way you want __________________ Tanguy 0x7a69 inc. Programmer/President/CEO http://www.0x7a69.com A Leader in Programming since 1996 PHP, Ruby on Rails, MySQL, PCI DSS, and any Technical Consulting

10-16-2003, 04:03 PM	#10
tantalising Registered User Join Date: Sep 2003 Location: Amsterdam The Netherlands Posts: 47	You can also try: Satisfy Any AuthType Basic AuthName "Members Area" AuthUserFile /path to your .htpasswdfile AuthGroupFile /dev/null <Limit GET POST> require valid-user order deny,allow deny from all allow from 64.62.200.131 </Limit> In this case it would allow visitors coming from arnoldschwarzenegger.com to visit your protected area Still as previous poster said a security hole. ..