Protected directories within protected directory

.htaccess all the way?

[lechatlisse]

Hi there,

I am about to start design on a site for a company that wishes to have a Clients Area that is protected by username/password. So far, so good, I can set up easy management for them via .htaccess.

Within the Client Area, they want password (but not username) protected areas for each project they are working on. So one client can't see the other client's projects...

What the best way to achieve this?
We'll been on an Apache server that accepts CGI, Perl etc..

Please note that I'm a relative newbie to this game.

Many thanks in advance for you help.

[jdMorgan]

You can deploy .htaccess files at each directory level, with the lower-level ones changing the login requirements as needed. For example, /a might use one username/password file, while /a/b might use a different one. You may also be able to make good use of 'groups' in this application.

Be careful to consider the long-term maintenance problem of using multiple username/password files, though. For this reason, I'd recommend looking at 'groups' in-depth.

Jim