Joined: Apr 24, 2007 Posts: 11 Location: Equine Park, Malaysia
Posted:
Fri Jun 08, 2007 11:52 pm
Im using CGI Auth (server only permit that).
Already configured .htaccess and .staccess.
On my production server, when I tried to access
Only registered users can see links on this board! Get registered or login to the forums!
it gives me 'Internet Explorer cannot display webpage' instead of pop-up window asking for username and password. It was ok 2 weeks ago and I didnt change anyting. I redownload the .htaccess file and test locally and it was fine. I emailed to webhosting admin and they said they dont change any setting on the server and .htaccess is working fine on other customers.
I figured out when I remove <Files admin.php> and </Files> in .htaccess, I managed to get the pop-up window asking for username and password.
Joined: Aug 29, 2004 Posts: 8625 Location: Arizona
Posted:
Sat Jun 09, 2007 3:10 pm
Well, I would imagine that you are getting the pop-up message regardless of what you try to access on your site, even index.php (with the Files tag taken out).
Did you by chance rename your admin.php to something else? I hate to ask such a question, but if this was working 2 weeks ago, either you have changed something or your host has.
BTW, hosts a notorious for saying they didn't change anything when in fact they had...
Joined: Apr 24, 2007 Posts: 11 Location: Equine Park, Malaysia
Posted:
Sat Jun 09, 2007 11:14 pm
Quote:
Did you by chance rename your admin.php to something else?
I didnt rename the admin.php. I leave it default from ravennuke.
Quote:
Well, I would imagine that you are getting the pop-up message regardless of what you try to access on your site, even index.php (with the Files tag taken out).
You are right, if I take out <Files admin.php> and </Files>, I will be getting pop-up message regardless of what I try to access on my site (www.anything.com).
The objective of <Files admin.php> and </Files> is to secure this single file -> admin.php.
So I created test.php to display 'hello world'. I changed <Files test.php>. and the result is the same, no pop-up screen asking for username/password and just a page 'IE cannot display the webpage'. Meaning, something is wrong with the line code <Files> and </Files>.
.htaccess is ok. But I dont know why I cant secure any single file for example admin.php in .htaccess. Btw, I already checked carriage return (tab, blank space around line <Files> and </Files> etc.).
Last edited by spidermonkey on Sun Jun 10, 2007 8:33 am; edited 1 time in total
Joined: Apr 24, 2007 Posts: 11 Location: Equine Park, Malaysia
Posted:
Sat Jun 09, 2007 11:22 pm
Quote:
but if this was working 2 weeks ago, either you have changed something or your host has.
I would like to add. Maybe last time it didnt caused problem because I access it using my home laptop (running both local and at the same time perform test on production-webhosting). so maybe the local cookies kept the key-access to the production.
I started to notice about this when I try login at my office (different laptop from my home) and I cant get the pop-up screen (www.anything.com/admin.php) instead I got 'IE cannot display the webpage'. I also remember when I went home and clear all cookies and offline contents of my home laptop and I got the same result.
Joined: Aug 29, 2004 Posts: 8625 Location: Arizona
Posted:
Mon Jun 11, 2007 6:28 am
I hear what you are saying, but I've never experienced anything that would lead me to believe that cookies are involved with <Files>. I think you need to go back to your host and ask them why the <Files> directive is not working. There may be something in the Apache configuration that isn't quite set up right.
Joined: Apr 24, 2007 Posts: 11 Location: Equine Park, Malaysia
Posted:
Sun Jun 17, 2007 10:45 am
Montego. You are right. After 1 week of my job idle because of this case, I reinstall ravennuke again.
Result: I managed to use HTTP Auth.
Earlier when I installed ravennuke, the HTTP Auth is not available and I dont have other option which to use only CGI Auth.
Since the HTTP Auth is already there (with CGI Auth also available), I rather use HTTP Auth rather then the complicated CGI Auth (complicated, but I learned a lot!).
The host which I registered to did made some changes on the server (since HTTP Auth is now available!), and it is true, they didnt inform their customers about it! I hate them a lot.
Thanks for your patience on answering my prob all these time. I'll keep looking into the forum and will definitely help u guys to answer any questions by other poster to ease your team's burden. Thanks and all the best!
Joined: Aug 29, 2004 Posts: 8625 Location: Arizona
Posted:
Mon Jun 18, 2007 7:51 am
spidermonkey, no worries m8. That is what we are here for. There are many here who contribute back to the community. That is what makes this site so great!
View next topic View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum