Re: Using ProxyPass exclude with directory containing .htaccess

Paul <paul@xxxxxxxxxxxxxxxx> · Mon, 10 Dec 2007 13:49:13 +1100

Vincent Bray wrote:

On 10/12/2007, Paul <paul@xxxxxxxxxxxxxxxx> wrote:

Thanks, I have tried using <Directory> but I haven't got it to prompt
for a username and password yet. I just copied the contents of .htaccess:

<Directory /var/www/mysite/stats>
AuthType Basic
AuthName 'Members Only'
AuthUserFile /var/www/mysite/.htpasswd
<limit GET PUT POST>
require valid-user
</limit>
</Directory>

Please read the regdeveloper link I posted. It'll show why Limit is
wrong too :-)

And don't put your passwords file in the document root. Even with a
block on .ht* files that's just asking for trouble.

Thanks again, I've removed the limit directive, but still can't get the 

protection working.

(don't worry, the .htpasswd file isn't in the document root - I just 

made a typo when removing the real directories for posting - well 

spotted though!)

I am reading and re-reading the regdeveloper link trying to see what 

I've missed.

Thanks.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx