How secure is htaccess with AuthUserFile

[tleish]

How secure is using an .htaccess file with AuthUserFile parameter that points to a .pass file that is located beneath the root of the website.

The reason I ask this is because a client want's this application that basically gives them full access to the site files. It uses the .htaccess as it's security for getting into the cgi script.

How secure is this?

 

[rninja]

Using .htaccess is secure against general computer users, however with the intermediate-advanced tech, or hacker, it is not the best security. There is no way to have absolute security, you can mearly enforce certain policies. It's ok to use it though. If I could I would probably use .htaccess with the more secure access mechanism mod_digest (I believe that's the name).

---ItNinja