Topic: Some help with locking Cgi-bin

[Anthraxnz]

Hi

i have the Circumventor cgi proxy running on my apache2 server, what i want to do is make it so it asks for a password.

i got the first part, so when you load the index page it asks for authentication, the problem is when you go to the history you can just launch the cgi file and it bypasses the authentication.

so what i want to do is make it so you have to enter a password.

this is the index file address that requires authentication
http://127.0.0.1/peacefire

this is how you bypass it, this needs locking
http://localhost/cgi-bin/nph-030731.cgi

is it possible to do a similar thing using .htaccess files? for the cgi-bin

[glsmith]

I guess you need to skip that other way and insted use what is built into apache using AuthConfig and .htpasssword/group files to lock down the cgi-bin directory itself, or one can use <Files> to lock down a single file leaving the entire directory free.

See
http://httpd.apache.org/docs/2.0/howto/auth.html
http://httpd.apache.org/docs/2.0/mod/core.html#directory
http://httpd.apache.org/docs/2.0/mod/core.html#files