HTML: Password Protection

Madasafish

I have been working on my website for a while now and I was wondering wether or not I can password protect a click button (link) which takes you to a private section of the website.

I want to be able to click on the button to the private section and be asked for a password before access, is this possible.

Many Thanks

hooj

have a look at this site, it explains exactly how to do it and is a fairly straight forward process

http://www.javascriptkit.com/howto/htaccess3.shtml

qparadox

Here's another tutorial on the same thing,

Note these methods require the following:
1) Your webserver is using Apache
2) Your webserver is running a unix, Linux or BSD. (Will work on windows as well but the CHMOD stuff is then irrelevant

http://www.sfu.ca/acs/sfuwebhelp/htaccess.htm

Example 4 in that list is the most applicable.

The official info is overly long and complicated and available here:

http://httpd.apache.org/docs-2.0/howto/htaccess.html

Straight_Man

Madasafish wrote:

I have been working on my website for a while now and I was wondering wether or not I can password protect a click button (link) which takes you to a private section of the website.

I want to be able to click on the button to the private section and be asked for a password before access, is this possible.

Many Thanks

Quick outline:

First, all login\logouts of that sort need to occur within a secure pipe, like https or sftp handshaking-- SSL2 pipe would be decent, form the pipe before asking for info. Second, PWs for validation on boht ends, need to be encrypted-- I would say shadow PWs on both ends. Apache and BSD\Linux used together facilitate this. Mozilla can do this on Linux\BSD\OSX\Windows, AND Solaris versions are being worked on. Security embedding can also use Java 2 beans.

The idea is to keep a trojan horse or bot or black-hat from getting your secure login info in a form a remote user can use unless you WANT that-- it is possible to encrypt the login itself to 256bit or 512bit ercryption and to pass double-encrypted info through a login pipe.

Kwitko

Madasafish, most important is what server are you using?

CyrixInstead

Yeah, all these questions seem perhaps a little technical. Are you using free webspace from a provider that only provides simple HTML pages or is it something more advanced. Just thinking you may not be able to use htaccess if its a simple web provider.

~Cyrix