PDA

View Full Version : Password protect



Dr-Host
05-11-2004, 01:49 PM
Hello
I'm looking for a way to password protect a single file

due to recent php exploits in admin.php with the IPB system
I know that it can be done because one hosting co in Israel did it but they don't wanna share the info

Thanks for any help and ideas that you may think of

Regards,
David

nobaloney
05-11-2004, 05:43 PM
The only way I know how to do it is to put it into it's own subdirectory.

Jeff

Dr-Host
05-11-2004, 10:52 PM
here's an example

Hebnuker (http://www.hebnuker.org/)

Heb Nuker admin.php (http://www.hebnuker.org/admin.php)

nobaloney
05-12-2004, 09:12 AM
There's no link to admin.php in the main page source code.

Since my Hebrew is a bit rusty (actually much more than a bit rusty), I can't tell from the website if there's a link on it to that page or not.

if there isn't, then there's probably a redirect going on either in a .htaccess file or in the httpd.conf directory or one of it's includes.

If there is, then they're doing something with php to effect a redirect.

Thinking about this further, they could possibly use javascript to force an authentication popup.

Jeff

Dr-Host
05-12-2004, 09:19 AM
a) I gave a full link to admin.php

b) they did something via .htaccess as I was told I just don't know what

directadmin.ru
05-12-2004, 10:04 AM
Originally posted by Dr-Host
a) I gave a full link to admin.php

b) they did something via .htaccess as I was told I just don't know what

allow from all
<files ~ "^(admin.php)$">
require user admin
</files>
Authname EnterPasswd
Authtype Basic

Dr-Host
05-12-2004, 11:22 AM
Thank you I'll check it out

Dr-Host
05-12-2004, 11:36 AM
one littel problem whats the user and whats the password

if the user is admin and the password is the normal admin password then it doesn't work

Dr-Host
05-12-2004, 12:03 PM
Ok I've solved the issue

nobaloney
05-13-2004, 09:46 AM
Dr-Host...

I've found another issue you may want to address.

When I try to access your site under the following OS/Browser combination, the site works properly:

W2k/IE
W98/NS4

(I can't test W98/IE; that combination on my last W98 system broke about a year ago and I've not bothered to reinstall Windows to fix it.)

When I try to access your site under the following OS/Browser combinations, the site hangs at the "loading site" page:

W2k/NS7
W98/NS6
RHL/Mozilla
RHL/Konqueror

I don't have a Mac, so I can't test on a Mac.

Jeff

Dr-Host
05-13-2004, 09:56 AM
I know we're working on a new design with any flash loading scripts