.htaccess

[mondemort]

Hello, i read a lot of about .htacces and .htpasswd to protect my Administrator Panel-> and i generated this

 

Generator

http://www.webmaster-toolkit.com/htaccess-generator.shtml

 

.htaccess

AuthUserFile /subdomains/shop/admin/.htpasswd
AuthGroupFile /dev/null
AuthName "Password Protected Area"
AuthType Basic

<limit GET POST>
require valid-user
</limit>

 

.htpasswd

mondeo:moEikw/354DVs

 

 

->Imput was

Username: mondeo
Password: mondeo

 

So what is problem about it?Both files are in right directory (/subdomains/shop/admin/) and if browser ask me for login and i enter all right it just sent to the hell ->bad password :( :(

 

Pls tell me what is bad?I dont know what it could be......

THX :D :D :thumbsup:

[Wendy James]

Not sure what is wrong with it but if you can not figure it out you can log into your hosts control panel and see if they have a link "password protect directory" or something like that and do it through them. Sometimes that is much easier. : )

[AlanR]

Try making the .htaccess file like this:

 

AuthUserFile /subdomains/shop/admin/.htpasswd

AuthName "Password Protected Area"

AuthType Basic

 

<limit GET POST>

require valid-user

</limit>

 

Also... it's bad practice to put the password file and the .htaccess file in the same directory, very easy to crack.

 

Put the password file at as high a level as you can, preferably above user web space if you can.