Secure a web page

sujte · 06-14-2004, 11:49 AM

I used PHP to create a simple login process so users can see some report directory pages. Even though the users log into the website, it is possible to see the directory pages directly by simply typing in the URL in the address of the browser. How can I secure my directory pages so they can be access only by someone logged into the site?

david_ross · 06-14-2004, 01:09 PM

You could do this with basic authentication:
http://httpd.apache.org/docs-2.0/howto/auth.html

Cerbere · 06-15-2004, 04:25 AM

And if you mean that people can see a list of the files in the directory, then you should copy, or link, or just rename your login php page to index.php. When one types the url with just a directory, and no specific file, Apache will default to index.html, or index.php; or if neither of those exists, it will show the list of files in the directory.

Enjoy!
--- Cerbere

[edit] You may have to edit httpd.conf to include 'index.php'. Look for the section like this:

Code:

<IfModule mod_dir.c>
    DirectoryIndex index.html
</IfModule>

And make it look like this:

Code:

<IfModule mod_dir.c>
    DirectoryIndex index.html index.php
</IfModule>

You should also add an index.html to all subdirectories, which will redirect requests to your login page. [/edit]