Directory Password Protection
Jan 4, 2008
When I use password protection using cPanel I have the following issue which is illustrated using the following example:
Main folder: X
Sub folders inside X: A, B
All three folders are password protected.
If a user has access to X, I would like that user to have access to A and B as well automatically. But this does not happen. I need to manually add this user to both A and B as well.
If a user has access to A, I would not like that user to have access to X. This is possible to do.
View 2 Replies
ADVERTISEMENT
May 31, 2007
I have a situation like this:
There is a directory say, "Master" and inside, "Master" there is sub-directory, "Slave". A user who has access to, "Master" should be able to access, "Slave" automatically. However, a user who has access to, "Slave" should not have access to, "Master". Inside cPanel this type of protection is not possible.
View 3 Replies
View Related
Mar 17, 2005
This is the first time I try a password protection with htaccess. For that tas k I have mainly copied exapmles from the documentation pages
The problem is however, that apache seem to ignore the .htaccess File completely. I am not asked for a password, nor is anything related to that in the logfiles
.htaccess:
Code:
AuthType Basic
AuthName "Password Required"
AuthUserFile /home/matthias/www/matthias/pwd/users
AuthGroupFile /dev/null
Require user photos
with the file users, created with htpasswd. It exisits and the path is correct
photos:EdlmuAi1RSkTM
commonhttpd.conf
Code:
<Directory />
Options*-All*-Multiviews
AllowOverride*All
Options*FollowSymLinks
<IfModule*mod_access.c>
Order*allow,deny
Allow*from*all
</IfModule>
</Directory>
AccessFileName .htaccess
httpd.conf
Code:
## Virtuelle Server (Matthias)
NameVirtualHost *:80
<VirtualHost *:80>
ServerName*www.local-matthias.de
DocumentRoot*/home/matthias/www/matthias
</VirtualHost>
Any Ideas what to do ?
View 1 Replies
View Related
Apr 24, 2014
I'm trying to set up password protection on an Apache HTTP server, and it's not working.
First, the environment: Apache 2.4.4 installed with XAMPP Control Panel 3.2.1 under Windows 7 Professional.
http.config says "AllowOverride All."
The .htaccess file in the protected directory says:
Code:
htpasswd -c .htpasswd samples
htpasswd prompted me for the password twice, and I entered it twice. When it quit I had a file named .htpasswd in the subsidy directory. I typed it and its contents looked correct according to the examples I've seen.
Then I restarted Apache and tried to load a page from the directory. The browser simply prompted me for the username and password over and over.
The Apache error log says, "AH01617: user samples: authentication failure for "/subsidy/filename.html": Password Mismatch."
I deleted the .htpasswd file and ran htpasswd again, specifying a different (very simple) password. I also confirmed that caps lock was not on both before and after. I restarted the server, tried to load a page, and got the same problem.
Apache seems to think I'm entering the wrong password, but that seems impossible when I've just defined it myself -- and I've tried twice, intentionally choosing a very simple password the second time. If the message means what it says, the cause must be something very different from the obvious one.
View 1 Replies
View Related
Oct 5, 2008
Anyone know a good program to let me put passwords from opening the hard drives via My Computer or especific folders, shortcuts, programs etc?
Lets per say someone got a hold of my Administrator password to have those important confidential files not to be seen a program like this would help. I am also going to set up that the server is only accessed from 2 secure locations just in case.
View 5 Replies
View Related
Mar 10, 2014
What is the proper way. to password protect a directory for apache 2.4.7. Information i gather seems to not work.
View 4 Replies
View Related
Mar 29, 2007
I use bluehost's pagewizard. So i created the members.htm then moved it to a password protected directory.
I don't know how to get the pics to show up, i only know that the location of the images is in wizard images.
View 1 Replies
View Related
May 24, 2014
On Plesk 11.5 / Centos 6.5 / Linux
I normally protect a given directory in the Plesk Contral Panel with a Username / Password. I would like to bypass the username and password for visitors from one IP.
View 3 Replies
View Related
Nov 19, 2013
Everyday after Backup Panel (Tasks from Backup Manager), I receive next error:
<?xml version="1.0" encoding="utf-8"?>
<execution-result status="error">
<object name="domain.ru" type="domain">
<message severity="error" id="416a91ad-e5e7-480b-b6b4-a60157b8eaae" code="InformationalException">
<description>Could not find password for account id '2648'. Return empty password</description>
</message>
</object>
</execution-result>
Resolve -> only reconfigure domain. How can I automatic fix this problem?
View 5 Replies
View Related
Jun 17, 2014
today i changed the password for the admin panel for a customer (username eg. mylogin). 10 minutes later he called me and said that he cannot get into his emailaccount anymore. Checked the password and saw that the emailpassword for his emailaddress (eg. mylogin@mydomain.com) is now the same from the admin panel login. So i changed the emailpassword and checked the admin panel login - it now has the emailpassword. What a mess.. I'm running Plesk Panel 11.5.30 MU47.
View 1 Replies
View Related
Oct 8, 2009
I am looking for some good ddos protection providers, via protected dns. I've searched on internet, but most of them are really expensive.
Please tell me some ddos protection providers what could help me.(gige is too expensive btw).
And I found some ddos protection scripts. How can a script protected a server from ddos? A sript like CSF or DDoS deflate?
View 12 Replies
View Related
Dec 11, 2008
How do I direct my httpd file to point to:
home/USER/public_html
instead of:
C:Users estetc...
I want to do this to make my test server just like the remote server.
View 5 Replies
View Related
Sep 18, 2008
I want to move the entire contents of a directory tree to another directory.
So for example we may have a directory with 15 directories inside, each directory contains files itself. I want to copy all the files from the directory tree into another directory located somewhere else one the file system. I want only the "files" to end up in the other directory and not the file structure too.
Im running CENTOS latest version.
View 4 Replies
View Related
Nov 22, 2007
How to change the Password of my FTP?
I know how to change the pwd. of cPanel, but I don't know how to change the pwd. of FTP?
View 10 Replies
View Related
Apr 16, 2009
Hey guys If there was a way to have the ips of the dedi change constantly would this help prevent ddos attacks or would there be no difference if the domain was being attacked.
View 2 Replies
View Related
May 25, 2009
i'am looking for a software based ddos protection,some one know something for try to mitigate a ddos or help to get the server rock a solid?And i need to know too where i change the DNS(vhost) of my DEDICATED server.
View 4 Replies
View Related
Sep 24, 2009
so a guy I know runs a site, it's being hit very hard with a DDoS attack. He's spending about 500 /month to keep his site online. He's using ServerTech, but for the last few days, it's been offline and they have been non-responsive for the most part. I'm guessing they just don't know what to do.
Do you guys have any recommendations for any DDoS protected hosting? He doesn't really want to pay more, if he doesn't have to.
View 14 Replies
View Related
Apr 5, 2009
What exactly does the DoS protection layer 2-4?
in which attacks are successful.?
View 1 Replies
View Related
Jul 25, 2008
one of my server were hit by massive ddos syn atack. target was port 80-apache
i am running centos 5 in xen vps iptables were strong with syn filtering and limit
but...what can do?
View 1 Replies
View Related
May 6, 2008
if any of you could recomened a ddos prottected vps that allows ircd to be run im curentley in process of waiting for setup from sharktek but there slow response /setup time is making me wonder if its worth it please post your recommendations here then i can start my own reasearch from your list
View 11 Replies
View Related
Jun 20, 2008
As we prepare to ramp up new networks, we are looking at different network attack protection devices such as Intruguard.
I am interested in input on other devices out there, or ideas using devices to protect against flood attacks and DDOS on a network that is under a gig in speed (100-200 Mbps).
View 4 Replies
View Related
Apr 24, 2008
Is bound to happen to my server one day or another (get attacked). So I need help deciding whether to get a DDoS protection server now or later. Or pay as I go (I'll explain this in a bit).
First of all I am considering getting this because I want to use this server to hide the real source where people are downloading from. People connect only through FTP server and download. Of course if I give the real IP away I am subject to attack at anytime from anyone.
I think if I buy a server somewhere else and have people connect to there then that server will connect to the real server if I was to get attacked the server I bought "somewhere" else would only get attacked which would or would not be protected by a that special company who protects for these kind of things.
Only downside so far is I have been able to have the method above done. A person connects from one server which connects to the real server they will be downloading from BUT I use up to 2x bandwidth. Because when someone requests a file from server A...server B sends to server A then sends back to the user requesting it. A process that well works but anyone know if instead of sending back to Server A it will go directly to the user without exposing any info on the real server?
When I meant "pay as you go" I mean have a server with a DDoS protection company but don't get any protection until it happens rather than waiting on the last minute before switching to them (like adding new users now but those users knowing the real source).
These "users" downloading do about 106GB average. So you can see how big a downside is having to use 2x of bandwidth from the method I know above. The companies I am on do not have DDoS protection that I know of so I am forced to look for external companies to use to connect to the real source.
-So far everyone knows the real source IP but that is because I trust them. Anyone else is waiting to get on it and me looking for ways to put them on.
//hopefully you enjoyed my big paragraphs.
-And what kind of "protection" would I need if only FTP is being used since there is "specialized" kind of filtering on attacks.
View 4 Replies
View Related
Oct 29, 2007
I was located in modvps.com, but I was asked to find another hosting because of DDoS attacks on my VPS.
Quote:
Hello,
Please move your accounts to some other hosting company. Let us know if you need any further assistance.
Regards,
Technical Support
I need:
DDoS Protection
RAM: 512 mb - 1024 mb
CPanel/WHM
10-30GB Disk Space
200-300 GB Transfer
60-70$...
View 14 Replies
View Related
Aug 15, 2007
Is there a way to enable hotlink protection so that when I edit a page from my computer the pictures from the server display from my server but my site is still protected from other hotlinking. My intent is to make it easier for someone to edit there page.(i know I could just reupload image files but I was trying to think of a way to make it easier for someone else) I thought adding my ip address to the cpanel hotlink protection enabler would do the trick but it hasn't.
View 4 Replies
View Related
Apr 6, 2007
wanting to password protect a directory and all FILES and DIRECTORIES under it as well.
I have tried the password protection system in plesk, simply put it doesnt work, sometimes it just doesnt restrict any access and the files can still be downloaded / accessed, and sometimes it asks for a password but even if typing the correct info it sais its a wrong password.
each time i setup the p/w i do it the exact same way, but its random about when it works and when it doesnt.
So, i tried the simple .htaccess way, and i still get the same problem. Can someone reccomend something to me? maybe a free php script that can do this? i need something fairly secure, doesnt need to be some super duper crazy script but at least so people cant just download the file containing the passwords and then they have access.
View 1 Replies
View Related
Sep 27, 2007
I have a plesk panel and i had a look for hotlink protection but unfortunately couldn`t find the proper option.
I guess there is a hotlink protection at windows version of plesk but not at linux one. I have a linux server.
Also i have a question about hotlinks also, one of my customer has a site that it uses too much bandwith like 600 gb at a month. It is an education related site and site is html.
And i am having some high load issues. When i check apache-status it shows %90 of the connections for that site. But i cant be sure that if it site really makes high load on server because like i told site is html. Also would like to know if server get s load for example if visitor wants to download something from site.
Because visitors are usually downloading zip, mp3 and those kind of files and i dont know if that many download cause the high load.
Also will it reduce the load of the server if i put hotlink protection to that site because of chance for other sites to leech files from this site?
Edit : If there isn`t any option for hotlink protection at Plesk panel how can i enable hotlink protection. Maybe using htaccess, but i would be glad if you can provide hotlink protection code also
View 1 Replies
View Related
Jun 13, 2008
Anybody have good experiences with some software based Apache 2.2 ddos protection. Im trying to find something similar then mod_evasive.
It's just that evasive won't work with Apache 2.2. It actually works, but it does not do what it is supposed to do.
Have tryed many different configuration, but it just won't do it.
After Googling i found out that many have suffered same kind of experiences with mod_Evasive and Apache2.2
I guess it is not working cos we got Peruser there. http://www.telana.com/peruser.php
Means that there is many differend child processes and evasive don't share data between childs.
So suggest me something. This is coming on prodution server with hundreds of domains so it has to be stable, fast and rock solid.
View 3 Replies
View Related
Apr 2, 2009
I have a budget of $20 monthly. I want to get a VPS, 500+ram, 15+gb, DDOS protection, managed, cpanel preferred. Which BIG webhost do you guys recommend? The webhost need to be big. Forget the small webhost, I am having a horrendous experience with a small webhost right now, and desperate for a change for better service, and quality.
View 14 Replies
View Related
