I use a simple .htaccess file to protect a folder: AuthUserFile /blah/blah/.htpasswd AuthGroupFile /dev/null AuthName "my music store" AuthType Basic <Limit GET> require valid-user </Limit> it works well. I would like to whitelist a specific HTTP_USER_AGENT ( iphones, specifically) so that they're let in w/o any prompt, while all other browsers are prompted for username/password. any pointers wud be much appreciated. thx. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx