Password protecting a website

[pikey]

I have a "public" index and a "private" index on my website.

I don't know how to put a password on a page which would take an authorised user through to the private page, so have just left it with a non-linked URL that needs typing in.

I thought I would try again with the simple password thing and have had a look for such a utility or code.

The thing is that all I'm pulling up is pages upon pages of chargeable programs to do this. I keep coming across a page for .htaccess - which appears to be Apache based.

Can anyone give me some pointers please?

Thanks
(Not actually sure what my webserver runs - would I need to know this first?)

[Plotloss]

.htaccess only works on linux hosts.

The contents of the .htaccess file define which users have access to that directory and its contents.

If you google for .htaccess there are loads of tutorials surrounding its use.

[FunkyGibbon]

your website appears to be apache on linux

got to

http://toolbar.netcraft.com/

and put

www.pikeynet.com

into the "what is this site running" box

so you should be OK to use .htaccess

FG

Edited by FunkyGibbon on Friday 15th September 11:51

[JamieBeeston]

just speak to Carrenza.

most Hosting accounts will have an easy to use control panel for protecting directories, I am sure they will have something similar, and if not would be happy to just sort it out for you.

J

[pikey]

FunkyGibbon said:

your website appears to be apache on linux

got to

http://toolbar.netcraft.com/

and put

www.pikeynet.com

into the "what is this site running" box

so you should be OK to use .htaccess

FG

When I do that I get "www.pikeynet.com was running Microsoft-IIS on Windows Server 2003 when last queried at 15-Sep-2006 11:01:56 GMT "

However the "Netblock owner" (whatever that is) Easily has a Linux listing next to them. (I bought the domain through Easily, but the site is on Carrenza

[JamieBeeston]

It's Windows.

t'interweb said:

OS guesses: Symantec Enterprise Firewall 7.0 running on Windows 2000 SP2 (90%), IBM AIX 4.3.2.0-4.3.3.0 on an IBM RS/* (88%), IBM AIX v4.2 (87%), IBM AIX 4.2-4.3.3 (87%), IBM AIX v3.2.5 - 4 (87%)

Alarmingly Terminal Services (3389) is open, which would indicate a windows box (assuming no funky port redirection)

You can use IIS in conjunction with folder Security permissions to lock down files / contents... but again, you pay Carenza so let them earn their money with the support.

J

[pikey]

I think I'm nearly there!

This page has what I want http://support.acmeinternet.com/power

The thing is, despite being the simplest bit of code ever it assumes a level of coding skill (which I'm clearly underneath!).

I have interpreted it that you have a form on an HTML page that takes an input and hands you over to the next page. That next page checks the password and if incorrect hands you back to the first.

They say "insert this code above <html>" - I've done that, and saved the file as an .asp but loading that page brings up the code (rather than the page). Is there something one has to do before naming a page .asp ??

Also, why is the code in the example not in the source code of the page?

Thanks

[JamieBeeston]

If it's windows the, assuming you've been given the ability to use/process ASP, then simply naming it .asp should allow it to be processed as ASP.. if it's giving the code, not the script, then this might well indicate you dont have permission to execute ASP on your hosting plan..

without wanting to sound like a broke record, your host will be the only people to be able to give you the answers based on your specific account.

J

[pikey]

JamieBeeston said:

If it's windows the, assuming you've been given the ability to use/process ASP, then simply naming it .asp should allow it to be processed as ASP.. if it's giving the code, not the script, then this might well indicate you dont have permission to execute ASP on your hosting plan..

without wanting to sound like a broke record, your host will be the only people to be able to give you the answers based on your specific account.

J

Ok, I'll do that!

Thanks - it was partly something I wanted to do myself to have the flexibility to move stuff around rather than put something firmly in place on the server side.

[JamieBeeston]

pikey said:

JamieBeeston said:

If it's windows the, assuming you've been given the ability to use/process ASP, then simply naming it .asp should allow it to be processed as ASP.. if it's giving the code, not the script, then this might well indicate you dont have permission to execute ASP on your hosting plan..

without wanting to sound like a broke record, your host will be the only people to be able to give you the answers based on your specific account.

J

Ok, I'll do that!

Thanks - it was partly something I wanted to do myself to have the flexibility to move stuff around rather than put something firmly in place on the server side.

Serverside = more secure than user side... user based forms can be bypassed easily.

J

[pikey]

JamieBeeston said:

Serverside = more secure than user side... user based forms can be bypassed easily.

J

I know, but this is just a bunch of personal photos. Just want to keep the amateur browser out of parts of it.

[FunkyGibbon]

pikey said:

JamieBeeston said:

Serverside = more secure than user side... user based forms can be bypassed easily.

J

I know, but this is just a bunch of personal photos. Just want to keep the amateur browser out of parts of it.

you dodn't want to associate the words amateur and photos to closly.

do a google search to see what I mean