SunQuest
 
           Web Server Configuration
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
User Name:
Password:
Remember me
 
Go Back   Dev Articles Community ForumsWeb DesignWeb Server Configuration

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Display Modes
 
Unread Dev Articles Community Forums Sponsor:
Ajax Application Generator Generate database and reporting .NET Web apps in minutes. Quickly create visually stunning, feature-rich apps that are easy to customize and ready to deploy. Download Now!
  #1  
Old February 9th, 2006, 05:09 PM
stu19 stu19 is offline
Registered User
Dev Articles Newbie (0 - 499 posts)
 
Join Date: Feb 2006
Location: USA
Posts: 2 stu19 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 40 m 58 sec
Reputation Power: 0
.htaccess question

Having a problem. Have a script on a server and am trying to protect a secure folder with the .htaccess file (below). It appears to work fine....blocks access from any IP except mine. However, there is one person that is able to still get in. The log shows he is coming in from an entirely different IP. He is doing unscrupulous things such as entering fake deposits, etc. I realize I'm not giving much info, but I'm not very knowlegeable about all this. The people who I lease the server from appear to be stumped.....anyone have any suggestions?...would be much appreciated.

AuthUserFile /var/www/virtual/subdomains/admin/trusted/.htpasswd
AuthGroupFile /dev/null

AuthName Members
AuthType Basic
require valid-user
order allow,deny
Allow from <my-IP-address>
Deny from any

Reply With Quote
  #2  
Old February 10th, 2006, 12:44 AM
Icon's Avatar
Icon Icon is offline
Command Line Warrior
Click here for more information
 
Join Date: Sep 2005
Posts: 621 Icon User rank is Private First Class (20 - 50 Reputation Level)Icon User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 1 Week 1 Day 22 h 27 m 25 sec
Reputation Power: 3
This is a longshot, since it's been awhile since I've tinkered with .htacces, but maybe 'deny from all' instead of 'any'?

Reply With Quote
  #3  
Old February 10th, 2006, 07:56 AM
MadCowDzz's Avatar
MadCowDzz MadCowDzz is offline
I'm Internet Famous
Dev Articles Frequenter (2500 - 2999 posts)
 
Join Date: Jan 2003
Location: Toronto, Canada
Posts: 2,890 MadCowDzz User rank is Lance Corporal (50 - 100 Reputation Level)MadCowDzz User rank is Lance Corporal (50 - 100 Reputation Level)MadCowDzz User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 1 Week 16 h 4 m 48 sec
Reputation Power: 8
I agree... I would try Deny from all
__________________
Daryl's Homepage | My Blogroll | My Profile | Firefox supporter!
DevArticles Forum Moderator

"The net is a waste of time, and that's exactly what's right about it." -- William Gibson

Reply With Quote
  #4  
Old February 10th, 2006, 11:01 AM
stu19 stu19 is offline
Registered User
Dev Articles Newbie (0 - 499 posts)
 
Join Date: Feb 2006
Location: USA
Posts: 2 stu19 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 40 m 58 sec
Reputation Power: 0
Quote:
Originally Posted by MadCowDzz
I agree... I would try Deny from all


Thanks for your replies...will try it.

I'm guessing that if "any" is incorrect and it should be "all" then it wouldn't deny any IP (?yes/no?). Right now it appears to deny all the IPs that I've tested it with (except for mine)...however, my intruder seems able to get in at will....and he doesn't always have the same IP...usually resolves back to an AOL address.

Thanks

Reply With Quote
  #5  
Old February 10th, 2006, 11:12 AM
Icon's Avatar
Icon Icon is offline
Command Line Warrior
Click here for more information
 
Join Date: Sep 2005
Posts: 621 Icon User rank is Private First Class (20 - 50 Reputation Level)Icon User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 1 Week 1 Day 22 h 27 m 25 sec
Reputation Power: 3
Yeah, so this will probably not work. But I guess it's worth a chance Isn't there a global hosts.allow file or something on that machine which is (I don't know how) bypassing your .htaccess? I'm grasping at straws here sorry..

Reply With Quote
Reply

Viewing: Dev Articles Community ForumsWeb DesignWeb Server Configuration > .htaccess question


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 6 hosted by Hostway