Gossamer Forum
Home : Products : Others : Fileman :

how to password protect a directory ? i'm a newbie

Quote Reply
how to password protect a directory ? i'm a newbie
thankx!

Quote Reply
Re: how to password protect a directory ? i'm a newbie In reply to
Here are some suggestions...

1) Use .htaccess/.htpasswd

For a tutorial, check out the following URL:

http://faq.web2010.com/htaccess.htm

2) Go to http://www.hotscripts.com and search for password protection, and you should find some CGI/Perl scripts that you could use to password protect directories and files.

Regards,

Eliot Lee

Quote Reply
Re: how to password protect a directory ? i'm a newbie In reply to
but fileman can't do it ?
i just want to protect the usage of fileman.cgi...

Quote Reply
Re: how to password protect a directory ? i'm a newbie In reply to
Not out of the box...again the suggestions are the best ones I can provide...if they don't work for you...good luck finding a solution!

Regards,

Eliot Le

Quote Reply
Re: how to password protect a directory ? i'm a newbie In reply to
what I did was set up fileman
in fileman sub folder

then I used fileman to password protect the directory that is was stored in it the easiesy way do not go playing with
.htaccess it will take to long to learn

Quote Reply
Re: how to password protect a directory ? i'm a newbie In reply to
That will NOT protect your scripts...with that little bit of information, I could spider your site and find the fileman.cgi and then use it to corrupt your site...not that I would, but the possibility exists. I would really recommend using .htaccess or another method of password protection.

Regards,

Eliot Lee

Quote Reply
Re: how to password protect a directory ? i'm a newbie In reply to
fileman is definitely a dangerous thing to have running on your system without proper security

FYI - Apache (for whatever reason) disables .htaccess by default. Anyway, it does in RH 6.2. You gotta go through httpd.conf and make sure to change all or some of the "AllowOverride" directives from "none" to whatever (I changed all of them to "All"). It boggles my mind that not allowing .htaccess to control security is the default....