Protecting Member Directory

Discussion in 'Installation' started by phcstudents, Jul 23, 2003.

  1. phcstudents

    phcstudents Guest

    How do I protect the directory users go to after they log in? Right now the directory can be accessed without logging in.

    Thanks!

    Josiah
  2. abbeyvet

    abbeyvet New Member

    Joined:
    Feb 2, 2003
    Messages:
    135
    There are several options for this which are all explained in the protestion plugins part of the docs:

    http://www.cgi-central.net/amemberdocs/

    Have a look there and if you are having problems deciding which is for you or how to get it working post another question.
  3. phcstudents

    phcstudents Guest

    At http://www.cgi-central.net/amemberdocs/pro.../htpassword.htm it says under Step 2

    but I don't see the "Setup/Configuration" link in the Admin Control Panel.

    Where is it?

    Thanks!
  4. abbeyvet

    abbeyvet New Member

    Joined:
    Feb 2, 2003
    Messages:
    135
    Are you using Pro or Free?

    I am not familiar with the free version so I don't know where the link is there or the code.


    Basically though, this will be your .htaccess file:

    AuthType Basic
    AuthName "Members Only"
    AuthUserFile /home/virtual/site91/fst/var/www/html/amember/data/.htpasswd
    AuthGroupFile /home/virtual/site91/fst/var/www/html/amember/data/.htgroup
    Require group PRODUCT_1

    Now that is a direct copy of one of mine, so you will need to alter the bits in italics - the first 2 to reflect your own server path to the .htpasswd and .htgroup files, that last to the actual product number that gives access.

    Just copy the altered version in a notepad file, save as .htaccess and upload. Generally Notepad tends to save as .htaccess.txt - remember to rename it without the .txt extension.
  5. phcstudents

    phcstudents Guest

    I did that, but I get the Internal Server Error message. I uploaded the file in ASCII if that helps.
  6. abbeyvet

    abbeyvet New Member

    Joined:
    Feb 2, 2003
    Messages:
    135
    When do you get an internal server error message? At the URL for the member's directory? eg www.example.com/members/?

    I thought you could just get into the member's directory without logging in - is this no longer the case?
  7. phcstudents

    phcstudents Guest

    Yeah, I get the error message when I try to access the member directory (http://www.phcstudents.com/secure).
  8. alex-adm

    alex-adm Guest

    Try to write it as:

    <Limit GET POST>
    AuthType Basic
    AuthName "Members Only"
    AuthUserFile /home/virtual/site91/fst/var/www/html/amember/data/.htpasswd
    AuthGroupFile /home/virtual/site91/fst/var/www/html/amember/data/.htgroup
    Require group PRODUCT_1
    </Limit>

    If it won't help, check server error log.
  9. phcstudents

    phcstudents Guest

    Thank you so much! It works!

Share This Page