Topic: How to secure files

[Manne]

Hi

Thanks for a great script. Is there any way I could make my files accesible only to my registered wordpress users? Or to improve safety in another way?

/Manne

[GaMerZ]

it is not mean to work with wordpress in any way. It is meant to be a public display of your files.

[Ttech]

So you'll have to use .htaccess.

 GaMerZ: I have a basic authentication script. I think it could be easily added into GFE. I'm not sure though

[GaMerZ]

as in HTTP auth?

[Ttech]

yeah or if thats not enabled a login form

[GaMerZ]

maybe if he want its, you can help him =D

[Manne]

Yes, I know it isn't ment to be used with Wordpress, I'm just trying to figure out a way to do it.

Ttech: Could you share your authentication script?

[Ttech]

Sure. I wrote it for someone on the SMF community a while ago. Let me find it. Its not like a drop in auth script for GFE. You'll have to rewrite some code.

[Manne]

No problems ttech, I will be happy to give it a try!

[Ttech]

OK. I am doing some custom programing for a friend, once thats done, I'll see what I can do to put it into GFE.

[rishk789]

Was there every any progress made on this end? I've tried "password protecting directories" through CPanel to no avail.  Thanks!

[GaMerZ]

Add a .htaccess file to the directory

Code: [Select]

<Files ~ ".*\..*">
order allow,deny
deny from all
</Files>

[rishk789]

Thanks Lester! But does this allow for password protection? I host my class notes on my site, but I want some notes made public to everyone while others are protected by a password which I can give out to certain individuals. I've looked into .htpasswd files, but it seems that GFE bypasses it and still gives access to the directory.

[GaMerZ]

Nope, GFE is meant to be used publicly and hence I did not build any PW protection into it. If you want to password protect it, I suggest you protect GFE using htpasswd also. and place your content within the same as GFE folder.

[rishk789]

If anyone has the authentication script by Ttech, please share! 

[rishk789]

I've got the following directory tree:

-private
      - MCAT
      - NBDE
      - USMLE1
      - USMLE2

I uploaded the GFE files into the "private" parent directory and successfully password protected the directory using .htaccess/password. Once I type the username and password, I can see all the subdirectories (MCAT, NBDE, etc.) but when I try browsing into them, a Not Found Error 404 is thrown. (I've also disabled the Nice URL feature, by the way, but it didn't resolve the issue.) As soon as I removed my password protection, the directories could be successfully browsed. Any idea how I can keep the password protection on the parent directory and still browse the subdirectories? 

[GaMerZ]

You might want to try using PHP AUTH http://php.net/features.http-auth and place the code in the config.php