protected admin set up

[isolina]

i edited .htaccess file as followings

 

Deny from all

Options All

AuthType Basic

AuthUserFile /www/nameofserver/htdocs/catalog/admin/passwd

Require valid-user

AuthName "Internet Shop - auth"

Satisfy any

 

and encrypted the password in the .htspasswd file.

myid:encrypted

 

it shows the log in box and it types my id automatically, but when i type password, it pops out.

 

anybody knows how to fix this?

 

thanks

 

isolina

[GemRock]

I do know why you do it in such a complicated way. What you need to do to protect the admin area is:

1. change the admin folder name to something which is hard to guess, e.g., hdTjBG74. (and update your configure.php accordingly!);

2. password protect that folder via cPanel or something like that ro ask your host how to pw protect a folder.

 

Ken

[isolina]

also i just reliazed that this blocks both site and admin site. like you said i am better off to change the folder name and

ask the hosting company to put the password on my admin directory.

 

 

 

but it was good

good to try though.

 

but want to find out the algorithm not putting the log in box for the site and admin.

 

thanks

 

isolina