Apache Realms and [PROTECT]
This WebDNA talk-list message is from 2003
It keeps the original formatting.
numero = 53681
interpreted = N
texte = I have a site that uses WebDNA to authenticate users. Users enter their username/password in a form, and WebDNA checks their info against the Users.db file. If the info is valid, they are redirected to a new [PROTECT]'ed page using the following scheme. This allows the browser to cache the username/password info. http://username:password@www.mydomain.com/home.tpl This has worked well for months, but users found out that they were able to access Word/Excel documents in the "files" directory on this site by calling them up via the correct address/path. This allowed them to bypass the login page, so I set up an Apache realm to protect the "files" directory and all subdirectories/files within it. Even when they're logged in properly, some users are now presented with an authentication dialog when they try to access a Word or Excel document in the "files" directory. Is there a problem with using [PROTECT] and my login scheme with Apache realms? I can post the login code if it will help. --------------------------------------------------------------------- Clint Davis Webmaster / Interactive Media Specialist Gray Loon Marketing Group, Inc. http://www.grayloon.com 204 Main Street | Evansville, IN 47708 | Phone:812-422-9999 --------------------------------------------------------------------- ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
I have a site that uses WebDNA to authenticate users. Users enter their username/password in a form, and WebDNA checks their info against the Users.db file. If the info is valid, they are redirected to a new [protect]'ed page using the following scheme. This allows the browser to cache the username/password info. http://username:password@www.mydomain.com/home.tpl This has worked well for months, but users found out that they were able to access Word/Excel documents in the "files" directory on this site by calling them up via the correct address/path. This allowed them to bypass the login page, so I set up an Apache realm to protect the "files" directory and all subdirectories/files within it. Even when they're logged in properly, some users are now presented with an authentication dialog when they try to access a Word or Excel document in the "files" directory. Is there a problem with using [protect] and my login scheme with Apache realms? I can post the login code if it will help. --------------------------------------------------------------------- Clint Davis Webmaster / Interactive Media Specialist Gray Loon Marketing Group, Inc. http://www.grayloon.com 204 Main Street | Evansville, IN 47708 | Phone:812-422-9999 --------------------------------------------------------------------- ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Clint Davis
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
restarting service remotely on NT (1997)
Images do not upload completely ... (2003)
state? (2004)
Why does this not work? (2002)
[WebDNA] SOAP support (2014)
CGI Request Time Out (1997)
Re:ListFields and [name] (1997)
WebCat2b12 CGI Mac - [shownext] problem (1997)
append=T problem (1998)
Emailer setup (1997)
authorize net (2001)
Emailer help....! (1997)
FEW QUESTIONS (1997)
Dark Horse Comics success story (1997)
affiliate marketing program (1998)
wierd crashes for multi-sendmails on NT (1997)
WebCat2b15MacPlugin - [protect] (1997)
WebCat2b13MacPlugin - nested [xxx] contexts (1997)
OT: Site Downloaders (2002)
[WebDNA] Mac Question (2018)