Forum Moderators: mack
I am building a personal website and want some (nested) pages of family information only to be available through a password. I have a program to do this, but the URL of the protected page remains visible in the address bar:
..../family_pages/family_index.htm
By deleting the name of the last file, the content of the "family_pages" directory is displayed:
Index of /...../family_pages
Trees/
family_index.htm
and the user can go straight to the lower level pages, bypassing the protection.
There must be a straightforward way to avoid this and I assume I am doing something fairly stupid. Can somebody help please?
This does not provide real protection it just forces a password to be entered if a particular link is followed.
An easy step for the novice is to hide the "private" pages by using frames but in the medium term you need to get some real server side security on your own web host.