Forum Moderators: phranque

Message Too Old, No Replies

password protection delegation

         

elliottg

11:39 pm on Oct 4, 2006 (gmt 0)

10+ Year Member



I have set up .htaccess password protection on my desired directory. It works perfectly. The problem is, there's a directory inside of the protected directory that must be accessed from a .swf that resides above the protected directory.

Is there some code I can put in the .htaccess that will still keep all the files and directories in the protected directory safe, but allow access to the one specific directory that the .swf on the Root needs?

Thanks

tsalmark

3:25 am on Oct 5, 2006 (gmt 0)

10+ Year Member



Uhm depending on how the swf is reqesting those files there is no issue so long as the apache proccess can read them. If you are talking about the swf file requesting the files by URL, not file structure, you should be able to call it like so:
[username:password@example.com...]

That is a standard URL for password protected dirs/files, I have not tested that with and SWF files so good luck with that part.

plumsauce

7:01 am on Oct 5, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



username:password has been obsoleted by the IETF.

I wrote several *long* posts on the mailing lists about retaining it to no avail.

elliottg

3:07 pm on Oct 5, 2006 (gmt 0)

10+ Year Member



Maybe this will clarify.

Just ignore what I was saying about the .swf on the _root. etc.. That really doesnt matter. The heart of my question has to do with making a speciifed subDirectory of a password protected _parent directory NON protected.

Below is my generic directory structure. As noted the "protectedDirectory" is pwrd protected.
And as you know, subsequently all the directories below it are protected as well. I need to keep this logic intact but UN-password protect "subDirectory2". I have read that I could just put another .htaccess file in "subDirectory2" to override its pwrd protection. I do not know how to do this i.e. syntax etc..

_root> protectedDirectory> subDirectory1> subDirectory2

Thanks a lot.

jdMorgan

4:46 pm on Oct 5, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



The easiest way to do it is to put another .htaccess file into the unprotected subdirectory, with

Allow from all
Satisfy any

in it. See [httpd.apache.org...]

Jim

elliottg

6:03 pm on Oct 5, 2006 (gmt 0)

10+ Year Member



Worked perfectly!

Thanks a lot.