[thelist] password & IP protection was: removing those htaccess passwords

[Daniel J. Cody]

Hey Mike -

Try something like this in your httpd.conf or .htaccess file:

<Directory /www/site.com/public_html/secret>
        Options Indexes FollowSymLinks (or whatever)
         AllowOverride None
         AuthName "Secret !"
         Authtype Basic
         AuthUserFile /www/site.com/.htpasswd
         require valid-user
	<Limit POST PUT GET CONNECT>
	Order deny, allow
         deny from all
         allow from 1.1.1.1
	</Limit>
</Directory>

that may or may not work :)

.djc.

m u i n a r wrote:

> Hi
> 
> Does anyone know how?
> 
> I have a password protected folder. Access is denied to all who don't
> have the password. So far so clear. Now I can combine it with a deny
> command: All but one single IP address are restricted from the access.
> If you access the folder from this IP address, you are prompted to
> input username and password. All others get 'access denied'.
> 
> What I'd need though is a combination the other way around: Everyone
> with a password can get in, and adding to that, the user from the
> specified address is allowed without a password.
> 
> Is that possible? I need it for a single web address to access a
> script within the protected folder.
> 
> Thanks!
>