Apache Page security

kkiedrowski · 12-14-2005, 11:32 AM

this is a quick option I am asking for.
I am setting up some demo/test pages on a virtual host site on Apache 1.3.x server
Now I know that basic Auth or digest auth will work but is there another way? I only want certain people to see the demo site.
now can you have htaccess file for each virtual server that is different? if i place the file outside the served pages won't that just be one big file for all virtual hosts?

bulliver · 12-14-2005, 12:40 PM

Quote:

can you have htaccess file for each virtual server that is different?

You can have a different htaccess file for each directory in your document root.

Quote:

if i place the file outside the served pages won't that just be one big file for all virtual hosts?

If you place it outside of the served pages it will have no effect. I think you may want to use the <Directory> directive, to place access restrictions on this entire demo site. For example, if your demo site is in /var/www/demo then in your httpd.conf:

Code:

 
<Directory /var/www/demo> 
... 
... 
... 
</Directory>

Any rules placed in that directive will only apply to files in /var/www/demo and below. Generally, htaccess files are used to single out individual pages/directories that need special access restrictions.