Switching to Apache htaccess login

Please post all install related problems here. Visit this forum first for troubleshooting.
Post Reply
User avatar
ssddgreg
Posts: 31
Joined: Mon 23. May 2005, 22:05
Location: Slovenia
Contact:

Switching to Apache htaccess login

Post by ssddgreg » Wed 24. Mar 2010, 07:38

I would like to switch from the login.php login to apache security (using the .htaccess file) for logging at phpwcms administrator part. I would like to pass the username and password to login.php somehow, so I don't need to provide the username and password twice.

Does anyone have a hint how to do it?

Thanks!
Dejan

User avatar
flip-flop
Moderator
Posts: 8178
Joined: Sat 21. May 2005, 21:25
Location: HAMM (Germany)
Contact:

Re: Switching to Apache htaccess login

Post by flip-flop » Wed 24. Mar 2010, 08:20

Hi,

I think this will not work without very special server based scripts.
Why you don´t rename your login.php? (Have a look into conf.inc.php -> $phpwcms['login.php'] = 'login.php';

Knut
>> HowTo | DOCU | FAQ | TEMPLATES/DOCS << ( SITE )

User avatar
Heiko H.
Posts: 868
Joined: Thu 27. Oct 2005, 11:41
Location: Dresden
Contact:

Re: Switching to Apache htaccess login

Post by Heiko H. » Wed 24. Mar 2010, 12:30

ssddgreg wrote:I would like to switch from the login.php login to apache security (using the .htaccess file) for logging at phpwcms administrator part.
Hi,

the first problem you have is:
The phpwcms administrator part is in the same directory as the cms itself! -> You need a lot of core code hacking to separate this! Because apache security works directorywise :idea:

Next:
You need to administrate your host to use Auth MySQL, mod_auth_mysql is needed for this. -> In the best case you administrate your host by yourself, or you have a very flexible provider.
and so on... :?

Just one question: Why do you wanna do this? I can't see any advantage, but a lot of work(for nothing)!?!

Regards Heiko...
Not longer here - sorry...

Haubner-IT GbR Dresden

User avatar
ssddgreg
Posts: 31
Joined: Mon 23. May 2005, 22:05
Location: Slovenia
Contact:

Re: Switching to Apache htaccess login

Post by ssddgreg » Fri 26. Mar 2010, 17:08

Thanks for your hints. Why - I don't trust PHP and MySQL so much regarding security issues.

However, Apache htaccess is also not the best one for typing in username and pwd as a string. I will move the login.php to a subfolder and add .htaccess protection on it.

Thanks again for your comments.

Dejan

Post Reply