Best way to make a website private

[Stretchwickster]

Dear All,

I am currently involved in a project whereby access needs to be provided to several different companies yet it should not be accessible to the general public.

I have built an access control system (i.e. PHP & MySQL login system) and have placed a robots.txt file in the top-level of my site containing code to disallow access to all pages, so that the search engines don't start displaying it.

Are there any other measures you would suggest I take to make this site more secure or "private"?

Your advice would be much appreciated.

Clive

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"To err is human, but to really foul things up you need a computer." (Paul Ehrlich)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To get the best answers from this forum see: faq102-5096

 

[traingamer]

If your pages are all php and each one is checking for a logged-in user, that should be sufficient. If, however, you have html (non-php) pages that you also want to be secure, I'd go with password protected directories (which would also keep out the spiders).

Greg
"Personally, I am always ready to learn, although I do not always like being taught." - Winston Churchill

 

[Stretchwickster]

There are no html pages in my system, just PHP and some supporting JS and CSS files. All PHP pages (except the login page!) are checking for a logged-in user.

Clive

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"To err is human, but to really foul things up you need a computer." (Paul Ehrlich)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To get the best answers from this forum see: faq102-5096