security issue

[NoBob]

Hi,

Nobody could help me with my 'hover - quick info I don't need' problem, but perhaps someone can help me over a worry I have about accessing the gallery.

How do I lock down the gallery from when I'm not working on it? Do I have to CHMOD something? When I go travelling, and have access to the Net in cybercafes, could I access the gallery through myAdmin (via server control panel), un-CHMOD some files, access the site on a public computer, and then re-CHMOD the neccessary files? I know you shouldn't access the admin page on a computer accessible by the general public. Hope that makes sense? I'm going travelling soon, so I won't have access to a personal computer.

Best, NoBob.

[TomKa]

What about setting the parameters in .htaccess or simply renaming the directory of you gallery in something like foo91rt5683fgt, if you want to get online with your gallery you can set the ordinary directory name.

[NoBob]

Hi Tomka,

Much appreciate your reply. I'll look into that. My gallery already has a 'unqiue string' name (is that what you mean?), but I may well be back with more questions about .htaccess. I will take a look this afternoon.

Best, NoBob.

[TomKa]

http://www.google.com/search?q=htaccess+howto&sourceid=opera&num=0&ie=utf-8&oe=utf-8

[NoBob]

Hi TomKa,

Thanks for that. After reading around the subject on Google, I found out about this script http://www.hotscripts.com/Detailed/21007.html

You upload the protect.php file into the directory you want to protect. You then go to the URL and set the username and password. (It asks you for the name of the site when you first set the password because that's what will appear on the log-in panel.) You have to do some CHMODDING before and after, but it's explained in the protect.php file.

Now, if someone could just answer my other question...and bobsphotos' question (and mine) about the Path Editor...I'd be very happy :)

Best, NoBob

[NoBob]

Oops, Pekka's responded to the Path Editor question.

NoBob

[TomKa]

For my Webspace I can set the protection directly from the admin paneel (CONFIXX-paneel), maybe you have also such an option like "Password protect".

[NoBob]

Would that be more secure than using the script?

NoBob

[TomKa]

...it's exactly the same, you set the parameters for htaccess together with a userlist and the crypted passwords in .htpasswd

http://www.emptypages.org/more/tips/password_protect.html

In .htaccess there is the following code:

AuthName "EE"
AuthType Basic
AuthUserFile /var/www/web32/html/foto/input/.htpasswd
require valid-user

and in .htpasswd you have the code:

Thomas:$1$btAf0P6B$ksj4rdCR831Os6x8qQgSq/

Thomas is the user, together with the crypted password.