.htaccess help

[yanos]

hi guys,

 

i have finally figured out how to secure my admin panel using a .htaccess file. i have created the files using an online tool wich makes both the .htaccess and the .htpasswd.

 

i placed them in the admin directory and when i try to access it i get asked for the password but when i enter the user and pass i created it still wont let me in.

 

i checked with my host to make sure the path was right and it still wont work. is there anything i am missing?

 

thanks in advance

 

euan

[Jack_mcs]

The path to the .htpasswd file is shown in the .htaccess file. You should compare that with the one shown in admin->Tools->Database Backups to be sure they actually match. Since your host didn't fix the problem, which they should have (or least tell you what it was), I wouldn't trust that they are correct about the path.

 

Jack

[yanos]

should my .htaccess and .htpasswd files be in the same folder, do they conflict if they are?

 

thanks

[yanos]

took the path from the backup page and it still wont work. do you think it may be something server side? they have to allow the use of .htaccess files dont they?

 

i'm not very impressed with the support (or lack of it) from my host.

[Jack_mcs]

It is recommended that that .htpasswd file be placed in a directory not reachable by the web (above your root directory).

 

Since you changed the path, I assume that means they were not the same. In that case you host seems to have made a mistake. They don't have to allow the use of .htaccess though I can't imagine why they wouldn't. My guess is that the files are just not setup correctly. Many hosts have a password protection option in their control panel. You should check that first. If they don't offer it and they won't help you get your admin password protected, I would seriously consider another host. If they can't, or won't, fix a minor problem like this, what will happen when you have a larger problem?

 

Jack

[yanos]

jack,

 

i have check the admin panel and there is a protect directory option but it does not work. i contacted them and apparently its because there is a .htaccess file on the server and the oscommerce shop software conflicts with it?! god knows, they seam to be sending me round in circles!

 

not impressed.

[satish]

Rather use hosting cpanel password protect icon and password protect admin folder.

 

Satish

[yanos]

thats the problem, trying to use the cpanel to password protect the folder is not working.

 

euan

[satish]

some quick fix till You get solution:

 

Rename admin folder to someting unique.

 

plus thru htaccess allow access to just Your IP address.

 

Satish

[Jack_mcs]

jack,

 

i have check the admin panel and there is a protect directory option but it does not work. i contacted them and apparently its because there is a .htaccess file on the server and the oscommerce shop software conflicts with it?! god knows, they seam to be sending me round in circles!

 

not impressed.

I've never heard that one before but it sounds like they are basically telling you you can't use .htaccess. There is a contribution named admin access that will allow you to password protect your admin without .htaccess so that will get you around this problem. However, you will most likely eventually install a change that will require .htaccess usage. When you do, that won't work either, based on what your host said. So, if I were you, I would move to a new host to avoid problems later on. If you do that, you don't need the above contribution.

 

Jack

[yanos]

That contribution says that its only to be used if you still have the original unchanged files. i have made a few changes to the site so does that mean i cant use this?

 

thanks

 

euan

[Jack_mcs]

Try re-reading the instructions. It says something like you can't just upload the files if your files have been changed. If they have been changed, then you have to manually install the contribution.

 

Jack