Authentication Required still for logged in members

Discussion in 'Setting-up protection' started by mnatividad, Mar 31, 2009.

  1. mnatividad

    mnatividad New Member

    Joined:
    Mar 31, 2009
    Messages:
    2
    Hello,

    I hope you can help me with this.

    From the amember/member.php page, I still get an 'Authentication Required' Dialog box when I click on the subscribed URL under the 'Your Subscriptions' section, even after logging in.

    This is the scenario:
    1. I log in as a member
    2. after logging in, from the member.php page I click the link of my subscribed URL.
    3. an 'Authentication Required' dialog box appears which says:
    "A username and password are being requested by <mywebsite.com>. The site says: "Members Only"

    Shouldn't there be no need for these dialog box since the member is already logged in? How do I keep this dialog box from appearing?

    Thanks,
  2. davidm1

    davidm1 aMember User & Partner

    Joined:
    May 16, 2006
    Messages:
    4,437
    What type of protection are you using for your content?
    I suggest new_rewrite. htpassword is whats probably giving you the popup box.

    David
  3. mnatividad

    mnatividad New Member

    Joined:
    Mar 31, 2009
    Messages:
    2
    Your advice did it. I changed the protection method to new_rewrite and I no longer get the popup box.

    I'm just wondering why i get it on the server site and not on my local machine when both are using the same protection method (i.e.htpassword ).

    But I'm glad it's working fine now. Thanks.
  4. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    mnatividad,

    I suspect you have the userid/password locally cached in your browser which is why you don't see it on your local machine when htpassword is enabled)..

    Clear your cookies and browser cache, remove saved passwords, close and reopen and I suspect you'll see it.
  5. francineward

    francineward New Member

    Joined:
    Mar 8, 2009
    Messages:
    4
    What would the htaccess look like for New_Rewrite?

    For the life of me I can't find a sample HTACCESS file that I can use to enable RewriteRule on my shared hosting.

    Here's what I know so far:
    - I need an HTACCESS in the root of my web server
    - It needs something like
    RewriteEngine on

    But what else? You talk about enabling it but there is not a current, up-to-date sample of what that file looks like.

    HELP! I'm going nuts here...
  6. davidm1

    davidm1 aMember User & Partner

    Joined:
    May 16, 2006
    Messages:
    4,437
    Easiest way is to send a tech support ticket to your webhost telling them to enable mod_rewrite.

    David
  7. francineward

    francineward New Member

    Joined:
    Mar 8, 2009
    Messages:
    4
    That's just it, they're claiming that mod_rewrite IS enabled on the server and that the problem is in my root HTACCESS.

    This is a multi-website server and the existing HTACCESS is above the installation of the website containing aMember. Do I add an HTACCESS to the root of the website where aMember is installed and put in something that file about "RewriteEngine on"? If so EXACTLY WHAT should be in that local HTACCESS file? That is the question I can't seem to get answered.

    I appreciate your prompt reply and assistance.
  8. davidm1

    davidm1 aMember User & Partner

    Joined:
    May 16, 2006
    Messages:
    4,437
    OK, since the host said its enabled, whats the problem you are getting?
    If its a matter of new_rewrite being grayed out in amember- theres a fix for that (its a false positive, or is it negative?)
    https://www.amember.com/forum/showthread.php?t=8488

    David
  9. francineward

    francineward New Member

    Joined:
    Mar 8, 2009
    Messages:
    4
    "If it's a matter of new_rewrite being grayed out in amember..."

    Yes, that's it, exactly. Commenting out those two lines did it! I'm going to do some additional testing, but it appears that aMember is protecting the correct folders and blocking attempts to list folders below the protected ones.

    Thanks for your help!
  10. mjmtaiwan

    mjmtaiwan aMember Pro Customer

    Joined:
    Aug 22, 2006
    Messages:
    45
    The htaccess file is preceded by a . so it is .htaccess which is normally invisible to ftp or even to your shell.

    Try ls -la if you have shell access to your webserver.

Share This Page