View Single Post
Old February 6th, 2008, 8:08 AM   #2 (permalink)
Sentinel
Surpass Fan
On a golden path...
 
Joined in Mar 2006
Hosted on SH100
446 posts
Gave thanks: 70
Thanked 17 times
Below is my .htaccess. You should not put your password file in the same directory as the directory you want to protect. It should not make it fail but from a security perspective it is not the best idea. You should place it in a file above the publicly viewable files, so therefore your path should look something like this.

AuthUserFile /home/account-name/.htpasswd
AuthGroupFile /dev/null
AuthName "Restricted Area"
AuthType Basic
Require valid-user

Also no need to place the name of the user in the file either. Again for best security the least amount of info you give the better. So that's why I just allow valid user.

Third I am guessing that your username is "t9n8m5t3s" ? Is that correct?

And last make sure that the password file is plain ascii text (and the htaccess file too for that matter) and make sure that you upload them as text and not binary. and make sure it is in the right place as defined by the location of the htaccess file path.

edit added:
Wait now. I see that you say that the user name is encr? Your password file should look like this :
username:encryptedpassword
__________________
SH100 , SH131 & SH124
Sentinel is offline   Reply With Quote