members .htaccess question easy $10 4 u techs
 

I'm sure this has been a topic before but really need a straight and easy answer about my members section authentication problem.

If you login to my member section:

www.mydomain.com/members

Then try and download movies from this folder: www.mydomain.com/members or www.mydomain.com/members/girlie1/ or any damn folder within the members section the server asks for the members username and password EVERY TIME it's a real pain in the ass.

I have tried different things I have had help from other techs but I can't get a plain English answer.

I can paypal $10 to the first person that can explain this to me so I can understand it and fix the problem - you can ICQ me or post your answer to my problem here.

Thanks for your time.

CLICK

It looks like yer actually going to mydomain.com/members and then calling the files as www.mydomain.com/members/*

apache sees mydomain.com and www.mydomain.com as 2 seperate entities.

And this wasnt worth $10 so give it to charity :P

NOPE that not it. I tried www.mydomain/members/video.mpg

then I tried mydomain/members/video.mpg

same shit, after i entered my login info to get into the members section it still asked me again for username and password before i viewed any videos.

Post the contents of your .htaccess file here and I'll fix it for ya.

DynaMite

post the contents of your htaccess file...

Jinx.
Owe me a toke.

can ya ICQ me ya gotta work me though it.

I'll split the 10 bucks with ya :1orglaugh

DynaMite

This sounds like that microsoft bug with media player....try embedding the clips in a webpage, bet they play. My mpegs don't play, but when I embed them in a webpage, they play great.
.wmv files should work too, embedded or not.

AuthUserFile /home/clicker/public_html/cgi-bin/pass/.htpasswd
AuthName "Members Only"
AuthType Basic
Require valid-user

Just post the contents of your .htaccess you can replace the
path and filename of your db file with nonsense.

DynaMite

rrrr sounds like a lotta work, i know there is a way around this by fukin with the .htaccess file or something

Looks ok except I would put your db file outside the docroot
of the webserver. It's quite easy to retrieve the file when it's
accessible for browsers

if it's only an issue for movies p00p just answerred that for you.
You owe him 10 bucks now :winkwink:

DynaMite

oh ya is this the htaccess file that you are talking about?


Editing/home/clicker/www/members/.htaccess


AuthUserFile /home/clicker/public_html/cgi-bin/pass/.htpasswd
AuthName "Members Only"
AuthType Basic
Require valid-user

It's an issue to access folders where pictures are within the members section too, so i guess it's not just movies.

I would gladly give p00p $10 if i could help me figure out what the problem is.

Do the pictures come up as broken images?

no, if you try and click on the folders it will ask for username and pass again. then you have full access to the files within the folder but not any movies, it will ask for username and pass again for every movie.

Im I makin any sense here?

apache.org has tons of usful information, i think you need to change a setting in your httpd.conf, but i could be wrong.

ya I went to apache.org and searched around but you have to be a rocket scientist to understand it. Can anybody help me?

No. Please give me ftp access to your server. But only after you try embedding the mpeg first. Sounds to me like a movie is in a folder, you click into that folder, and everything loads. You click to download the mpeg, then it asks for username/pass right?

Yes thats correct, only the movie files are .wmv

What is this you said a few posts earlier"
"NOPE that not it. I tried www.mydomain/members/video.mpg "
Are they .wmv or .mpg?
Either way, try - to - embed - the - clip so it loads off an .html page, not directly from a directory.

which processor are you using? im pretty sure epoch has as .htaaccess file ... or you could try using a cookie? or using http://members.domain.com/ and setting a cookie.. then you won't have to worry about if they have http://domain.com or http://www.domain.com

That isn't his problem. His authentication is working, as is his members area. Everytime he loads a movie, it pops an authentication box. This is a MS Media player issue...

Oh.. i have something that would work... not the best idea.. but it would work. Everyday you generate a new username and password for your movies and when the members click the link to download the movies.. send them to the link

http://movie_user_name:movie_pass_wo.../yourmovie.wmv

would work.. that's my only idea...

hmm the board messes up the link.. it would look like

http:// username:password @ domain.com/members/movies.wmv

without the space :thumbsup

actually I thought of doing that but its just not practical.

Duno why not... you could also setup a referal url .htaaccess file on all of your movies... so no one can be posting your username and pw to the movies.. could change the username and pw every 10 minutes if needed to.. or hell.. only allow 5 logins per username and password then generate new one's.. seems good to be.. but im not a programmer.. so maybe there's bugs

I GIVE UP!
embed src would solve your problems, assuming it was the username/password box always popping up when directly downloading a video.
BUT IT FALLS ON DEAF EARS! :BangBang:

dude i have like 1200 movie clips. Its would take a year to do this. I like your idea don't get me wrong it's just not practical. I have been a member to other sites and they have no problems with a direct download link from the members section.

I think its all in my dir structure or adding a line in my .htaccess I have no clue buts it's pissin me off, and my members. I need some help!

:321GFY

And how you will do that!
What is the html code for embed clips?

<embed src="http://www.yourdomain.com/Trailers/Trailer.wmv" mcscalemovietofit=true height=240 width=360 autoplay=true controller=false loop=false></embed>

woe, that fucked up this thread.

The problem is most likely to reside inside the apache configuration file itself.

It sounds alot like a virtualhost setup incorrectly.

See the answer to the question Why does it sometimes ask me for my password twice? at http://httpd.apache.org/docs/howto/auth.html#basicfaq for why the server may be at fault. Also, check that this happens for other people, your browser could be misbehaving.

They are prolly using refferer protection not password on the videos.

I have had this issue... since I lease a members area out to paysites...

Its quite simple...

If a surfer access the members area via " http://www.domain.com/members/ " Then all of the content inside MUST be linked via " http://www.domain.com/members/* ".

If a surfer access the inside via link "/members" then it has to be " /members/whatever " Otherwise, if a surfer visits via " http://www.whatever.com/members " then the stuff inside is linked from the members main page as " /teen/gallery1/index.php " it will ask twice, but not again unless another link it " http://www.whatever.com/teen/gallery2/index.php "

GoodLuck, ICQ me if you need further detail. I have gone thru this before. Sometimes there are issues with movies... though, that cannot be fixed.

Poop is correct.

When WMP opens a movie inside a protected directory your server wants to reauthenticate it like a new browser session. This all started back with WMP7 if my memory serves me correct. The only way around this is to not place your movies in an htpassword protected directory and use a special script to keep people from hotlinking them.

OR

embedding them in an html page as Poop stated should work as well if you want to go that route.

The answer is:
The username/password is cached by the browser so the member doesnt have to type it in again for each authenticated request...when you click on a file type that uses a non-inline viewer, like windows media viewer, the username and password are asked for again cause the seperate viewer has no knowledge of the username and password. You can get around this by encoding the username and password in the link on a php page... username::password@www.mydomain.com/members/some.mpg
This however will not work with mpeg4's and there is no workaround as of yet for mpeg4's.
You can thank microsoft for not thinking of this and making it anoying to the members.

Chris

I would add the following to your .htaccess for extra security:

RewriteEngine on
RewriteCond %{THE_REQUEST} ^.*htaccess.*$ [OR]
RewriteCond %{THE_REQUEST} ^.*htpass.*$
RewriteRule .* http://www.mydomain.com/members [R,L]

OR

<Files ~ "^.*\.ht.*">
Order allow,deny
Deny from all
</Files>

Then no one can view your htpasswd or htaccess file.

Chris

OR!!!!!!!!!

Embed your media files. you all suck ass.

could make a simple script to embed the movies... /movie.asp?url=urlof the movie

Damn forum screwed up my post :feels-hot

Here's a one-time-only freebie from venturi:

The reason you are having problems is that when WinAmp or RealPlayer or WinblozeMediaPlayer fires up and tries to access the movie clip it looks like a type-in (i.e. there is no refering URL), so your .htaccess file 'thinks' it's a hotlinker and blocks the program from accessing the file. The following snippets of code are all you need to grant access to your clips while still blocking hotlinkers/cheaters/etc.

.htaccess file:

RewriteEngine on
RewriteCond %{HTTP_COOKIE} !(^|(.+;)*)id=valid(;.*|$)
RewriteRule .*$ http://www.yourdomain.com/cheaters.html

js to set the cookie:

&lt;script&gt;
document . cookie = &quot;id=valid; path=/&quot;
&lt;/script&gt;

Instructions:

1) Add the js to the &lt;head&gt; section of the document containing the links to your videos. (Note: remove the spaces in 'document . cookie' )
2) Modify the .htaccess code above to reflect your proper domain and page to redirect hotlinkers and place it into your directory/folder containing the videos you want protected.
3) Upload the files.
4) HUGE PROFITS!

p.s. - you can donate the $10 to your favorite charity (even if that happens to be me :Graucho )

I have been trying to get a hold of you via ICQ for 2 days now man, your idea is great and just need a bit of help to get it running if it's not too much trouble. Thanks to everyone for helping me out on my problem!:thumbsup :thumbsup