htaccess help.
 

the htaccess for my members area is setup to check for a password, how can i make it allow certain domains access without prompting the user for a password? thanks in advance to anyone that can help!

put your files in distinct folders. use multiple htaccess files, one for each directory that you need password protected. for instance:

/free (dont have an htaccess)
/teen (have one)
/gay (have one)
/free-movies (dont have one)

wherever you put the htaccess will affect all subdirectories.

Set up a allow list for particular domains.
Read Oriley and Associates "Apache"
Good info there or do a google search for "htaccess+howto"

I think what your asking is how to allow access from a certain referring URL?

is that it? when you come from a certain URL, you would not be prompted for a password?

you need referrer type set up in your http.conf file

thats what i want, but if its not a url i specify i want it to prompt for a password...

I trust you are aware that this is a massive security hole and will break most anti-password sharing scripts.

netrodent,
then how does everyone else do it? i just want my members to be able to access the member area to all 7 of my sites...

if you have teh setenv module loaded which most apaches do by default you can do

SetEnvIf Referer "^http://www.mydomain.com" myrefallow

order deny,allow
deny from all
allow from env=myrefallow
Satisfy Any


and leave in there your other Auth lines and do the SetEnvIf line for each refering url you want to allow

this is a security hole as anybody can fake their referring url and they do.

the best way to do waht you want to do is to get a programmer or sysadmin set up your system the way you want

There are a couple ways:
1. Use a common members area divided up so it looks ike multiple sites.
2. Use session based authentication (my personal favorite).

You can also try:


Satisfy Any
AuthType Basic
AuthName "Members Area"
AuthUserFile /path to your .htpasswdfile
AuthGroupFile /dev/null
<Limit GET POST>
require valid-user
order deny,allow
deny from all
allow from 64.62.200.131
</Limit>

In this case it would allow visitors coming from
arnoldschwarzenegger.com to visit your protected area

Still as previous poster said a security hole.


..

This is your best bet.