PDA

View Full Version : .htaccess in conjunction with vBulletin user/permission system


mr2jswe
Tue 8th Mar '05, 8:24pm
I would like an .htaccess file (regardless of what folder I want to secure on the website) to validate accesspermissions through the built in vBulletin usersystem

In doing that my users would only need one password (their usual vBulletin login/pass) and the files would still be kept "secure". An enhanced .htaccess security (with on-board 5 login attempts) if you will.

The level I need is ReadOnly permission.

Does anyone have a clue what syntax I should use to write my .htaccess-file to make "the two" work together?


More in-depth description:
My site is based on vBulletin with a CMPS add-on. Through the Custom Page Content I can show HTML pages, and what I need to show there is a HTML converted Excel spreadsheet. Now the problem with a converted spreadsheet is that it produces all sorts of formats to display properly. (.htm, .xml, .jpeg, .gif, .css) In addition it creates a subfolder where most of the files end up.

I need the display to be non-public and secure. First option, and probably the most secure way would be storing the files in the database, but it smells like a world of trouble.. Second option would be to upload and store in an .htaccess protected folder as described above.

I think that vBulletin has many great features, and that this (if possible) would be another level of usefulness. Its not easy to find threads in this topic, probably since most forums are made for the public.

If someone could point me in the right direction I would greatly appreciate it!

Jake Bunce
Tue 8th Mar '05, 10:25pm
I have heard this is possible, but I don't know how to do it. :(

I am moving this to the Server Configuration forum.

buro9
Wed 9th Mar '05, 7:10pm
You want a mod_auth variant... I would suggest something like this:
http://www.diegonet.com/support/mod_auth_mysql.shtml?

Here's a guide:
http://www.modwest.com/help/kb1-161.html

You'll also need to store your passwords slightly differently, or maybe in duplicate and plain text in the second instance for simplicity of configuration.

That bit will take a little hacking... not much though so I'm sure you can figure it out :)

mr2jswe
Wed 9th Mar '05, 11:15pm
You want a mod_auth variant... I would suggest something like this:
http://www.diegonet.com/support/mod_auth_mysql.shtml?

Here's a guide:
http://www.modwest.com/help/kb1-161.html

You'll also need to store your passwords slightly differently, or maybe in duplicate and plain text in the second instance for simplicity of configuration.

That bit will take a little hacking... not much though so I'm sure you can figure it out :)
Thank you, I will take a deep breath and dive into it.