htaccess

[antdickens]

Not sure if this is the correct group!!

I have used htaccess to restrict access to certain directories within my website.


When a user has logged in then tries to access a different part of the site which i do not want him to access it prompts him to enter a password. It it possible to just get it to go to the error page.

 

[ericbrunson]

Not really.

 

[ericbrunson]

Well, at least not with the standard mod_auth.

You could use mod_python or something similar to intercept the auth events and write your own rules to do whatever you want. If you're interested I can point to some howtos and give you some example code I've written.

Once you get it installed and understand a couple of basic concepts it's pretty easy and *extremely* powerful.

 

[percent]

do you mean restrict access to that portion of the site completely to the world - I don't understand your question


%, 2004

 

[MichealC4]

Not sure if I understood the question, but here is my stab at it.

You could do an deny from all, allow from ...

Awfully hackish, and ericbrunson's way is probably better, but that's my suggestion.

----------------------------
"Security is like an onion" - Unknown

 

[percent]

if that is the deal then you could just use chmod 700

%, 2004

 

[SimonDavis]

Isn't this just a directory permission thing?

I've seen plenty of times when surfing the net, that if you try to move down the tree, you get a 403 error - permission denied. You can presumably set a custom 403 page, either with what you want to say, or a redirect.

And don't ask me for an example, I've, um, forgotten which webite it was I was trying to find more directories in. Ahem.