• Security: How do I implement it?


    Secure Web Pages

    Secure Passwords

    Secure CGI-BIN Directories


    Secure Web Pages

    How do I secure all web pages in a directory?

    If your home directory is yourlogin, create a file named .htaccess in your web directory that contains the following:

    
        AuthUserFile /home/yourlogin/.htpasswd
        AuthGroupFile /dev/null
        AuthName ByPassword
        AuthType Basic
        <Limit GET POST>
        require user pcnerd
        </Limit>
    


    Then in your home directory, type htpasswd -c .htpasswd pcnerd.

    This will enable you to secure the directory so that only user pcnerd can enter this directory.

    You may well want any of the user/password combinations you created in your .htpasswd file to allow access. Just say require valid-user instead of require user xxx in .htaccess and any of the users you created will be able to access the files.

    Note that you want to store the .htpasswd file in your home directory so it is hidden from others. The one drawback to putting your .htpasswd file in your home directory is that you will have to slightly lower the security of your home directory. Go to /home and type chmod +x yourlogin. The web server needs execute permission on to read the .htpasswd file.

    Secure Passwords

    How do I create a secure password?

    Make it at least 6 characters long. Include at least one number, capital letter, or punctuation mark in the name.

    Secure CGI-BIN Directories

    How do I secure all pages in a cgi-bin directory?

    To stop people from being able to read your scripts under all circumstances, end your CGI scripts with the name .cgi.

    This page is maintained by Zone Internet

Copyright 1998 Stephen R. Marsh

adrr.com [home]

Mediation Essays

Mediation Topics

Mediation Centers

Advanced Topics

Bulletin Board

ADR Links

More ADR Links

Newsletters

E-Mail to Author

Author's Home Page

Search the Site