I have password-protected a directory on my website using htaccess. When I type in the URL to the folder I get a simple popup box where I can type in my info. All is fine. But w
One possible approach...
Say you want to protect the directory "protected".
Using .htaccess
, limit all access to this directory by putting
Options -Indexes
# Block External Access
deny from all
in the .htaccess
file within the "protected" directory.
Next, use a RewriteRule to catch all URL's going to the "protected" directory in your main .htaccess
file. For example:
RewriteEngine on
RewriteRule ^protected/(.*) accessprotected.php?url=$1
Normally, the RewriteRule should catch all URL's going to the "protected" directory and transmit them to the accessprotected.php-page.
On the accessprotected.php-page, check for login-status.
if (isset($_SESSION['LoggedIn'])) { // or something like this
/*
Here, you should check what file type is being
requested and handle this properly.
*/
} else {
// put code for login form here
}