Announcement

Collapse
No announcement yet.

password protect a directory

Collapse
This topic is closed.
X
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • password protect a directory

    Hi there.

    I usually use linux web hosting and therefore in love with .htaccess.

    However, there is nothing wquivalent to that in IIS.

    I need to password protect an entire directory.
    I have no access to AD on the machine, and not able to access IIS admin as well.

    Any ideas?
    Visit iCount
    Visit MSEC
    Visit LCS-GUIDES.COM
    Visit Melariche

  • #2
    Lock the folder down with NTFS permissions. Ensure IUSR_<computername> does not have access to the folder only a local account\group on the server.

    topper
    * Shamelessly mentioning "Don't forget to add reputation!"

    Comment


    • #3
      Re: password protect a directory

      Originally posted by Meni
      I have no access to AD on the machine, and not able to access IIS admin as well.

      Any ideas?
      Visit iCount
      Visit MSEC
      Visit LCS-GUIDES.COM
      Visit Melariche

      Comment


      • #4
        If they are asp pages then you could code some security and use session variables.

        topper
        * Shamelessly mentioning "Don't forget to add reputation!"

        Comment


        • #5
          got any code examples? or any references to where I can read about this?
          I know nothing about ASP.
          Visit iCount
          Visit MSEC
          Visit LCS-GUIDES.COM
          Visit Melariche

          Comment


          • #6
            I don't think I have any, if you have access to dreamweaver MX or later then this has built in behaviour to create a login page which then sets a sessionvariable, then at the top of everypage you need soemthing like

            Code:
            <% if session("loggedin") <> true then
            response.redirect ("\login.asp")
            endif  %>
            topper
            * Shamelessly mentioning "Don't forget to add reputation!"

            Comment


            • #7
              I will have a look in DW.

              Thanks for your help.
              Visit iCount
              Visit MSEC
              Visit LCS-GUIDES.COM
              Visit Melariche

              Comment


              • #8
                OK.
                if anyone's interestes, found an article @ mivrosoft's website about this.

                Pretty straightforward using FP and Access.

                (although I hate FP, this works great so I have nothing agains giving it a shot...)

                here it is:

                http://support.microsoft.com/default...n-us;825498#10
                Visit iCount
                Visit MSEC
                Visit LCS-GUIDES.COM
                Visit Melariche

                Comment


                • #9
                  Do you have access to non-shared areas on the server ?

                  Don't dump your access DB in the same folder or anyone could download it and read all the info, and since you can't lock down a dir with NTFS the DB needs to be outside any shared areas.

                  I'm guessing this is a public web server which you only have FTP access to.

                  topper
                  * Shamelessly mentioning "Don't forget to add reputation!"

                  Comment


                  • #10
                    well.. yes it's a shared server to which i only have FTP access.
                    but i was under the impression that _private folder was not viewable from the web...
                    Visit iCount
                    Visit MSEC
                    Visit LCS-GUIDES.COM
                    Visit Melariche

                    Comment

                    Working...
                    X