On Jan 6, 2008 3:04 AM, Tomas Larsson <tomas@xxxxxxx> wrote: > Well, the problem is I cant put the username and the password in the url, > http://user:passw@mydomain/scriptdir/script is not allowed, thats the reason > why I cant use .htpasswd to protect the dir. That's a client restriction and has nothing to do with apache. > If it wasn't for this restriction I would be able to use .htpasswd w/o any > problem. > so-far Ive put 100 on the dir, and I have done some simple checks, like I > cant wget anything from the dir, if I wget an existing filename I get 0 > bytes. You can use Order/Allow/Deny to restrict by IP address. Other than that, you need to specify how you expect to differentiate between you authorized and unauthorized users. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx