Posted by laredotornado@zipmail.com on 10/26/06 16:34

Hi,

Based on some info on this newsgroup, I'm trying to password protect a
directory of both PHP, HTML, and image files. The web server is Apache
2 and PHP is 4.4.4. I created this .htaccess file

RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_FILENAME} !^accesscontrol.php
RewriteRule ^(.*?)$ accesscontrol.php?file=$i&%{QUERY_STRING} [NC,L]

and then, just to check to make sure requests were hitting hte
accesscontrol.php file, I created accesscontrol.php to look like below
....

<?php

header('HTTP/1.0 401 Unauthorized');
exit;

?>

so theoretically, every request should result in a 401. However, when
I visit a page in the directory where this stuff is stored, I can view
the page just fine. Why is the above failing to filter my requests?

Thanks, - Dave

[Back to original message]