logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: htpasswd file question
Author
mrdj1024



Joined: 03 Apr 2023
Posts: 54
Location: Bridgeton,NJ,USA

PostPosted: Wed 09 Oct '24 16:14    Post subject: htpasswd file question Reply with quote

hi!
im using the latest wampserver and apache on windows
i have alot of unused apache modules disabled(for speed and security)
i dont know which module(s) i need to enable for a password prompt on a directory.
on my website i have a staff directory and i want only that directory to be password protected,how would i do that on windows?
i read where only plain unencrypted passwords work on windows for the files but im not sure
can someone please help me?
all i want is a simple dialog box that prompts for a user and password,thats it.
my website is already served over https so i should be ok right?
https://ibb.co/TMrzCnD (pic of my module config)[/url]
ignore the php and apache versions(i manually update the files)
i am using everything at the latest versions
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg

PostPosted: Thu 10 Oct '24 16:37    Post subject: Reply with quote

mod_auth_basic or mod_auth_digest depending on what you like to use.

mod_authz_user
mod_authn_core
mod_authn_file

See https://httpd.apache.org/docs/2.4/mod/mod_authn_file.html for details.
Back to top
mrdj1024



Joined: 03 Apr 2023
Posts: 54
Location: Bridgeton,NJ,USA

PostPosted: Fri 11 Oct '24 1:20    Post subject: Reply with quote

thanks for the reply! i found this alternative instead,do you think it would be safe to use? https://robinmoisson.github.io/staticrypt/
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg

PostPosted: Fri 11 Oct '24 10:23    Post subject: Reply with quote

mrdj1024 wrote:
Thanks for the reply! I found this alternative instead, do you think it would be safe to use? https://robinmoisson.github.io/staticrypt/


No. It uses AES-CBC[1] which is no longer secure.

[1] https://github.com/robinmoisson/staticrypt/blob/main/lib/cryptoEngine.js#L6
Back to top


Reply to topic   Topic: htpasswd file question View previous topic :: View next topic
Post new topic   Forum Index -> Apache