I recently needed to protect some directories on my machine, on which I have
XAMPP for windows (Apache, MySQL, PHP) installed.
Incidentally there is also a portable version that will run from a memory stick, meaning you can set up a web server from any machine (running windows) by plugging in the stick and starting the server! :)
The issue I had was creating protected (web) directories. After searching around a bit, I found that no-one had a simple guide to doing this (that I could find), so I thought I'd put a a simple example here! :)
There are two parts to this, the first, creating the passwords file, the second, protecting the directory with a password.
Part 1
The first task is to find a program that will do the work for you, in XAMPP that resides under the
xampp/apache/bin/ directory. On my machine that is at
C:\xampp\apache\bin\htpasswd.exe.
This program will create a user and a password in a specified file (normally .htpasswd). You should open a command prompt and call the following command to create the password file for the first time. (to add new users, simply omit the -c )
htpasswd.exe -c -b .htpasswd frank apassword
This will create a new passowrd file called .htpasswd with the username
frank and the password
apassword. (the -b command basically tells it to take the password from the command line, if you omit the -b and the password, then the program will ask you to type the password in twice to confirm). Shown below:
C:\xampp\apache\bin>C:\xampp\apache\bin\htpasswd.exe -c C:\xampp\examplepasswords\.htpasswd frank
Automatically using MD5 format.
New password: *******
Re-type new password: *******
Adding password for user frank
NOTE: the password file should not be web accessible, so make sure the path is somewhere above the root of your web directory
On my machine, I would type:
C:\xampp\apache\bin\htpasswd.exe -c -b C:\xampp\secret\hidden\place\.htpasswd frank apassword
On some installations you may need to resart Apache for the changes to take effect.
Step 2
The next step is to protect the directory, this means putting a file into it, that will cause Apache/Web Browser to prompt for a username and password.
Simply put the following information into a file called
.htaccess, and put the file into to directory to protect.
AuthName "Protected Area"
AuthType Basic
AuthUserFile C:/xampp/secret/hidden/place/.htpasswd
require valid-user
Note the direction of the slashes (forward slashes) this may not be an issue, but worth checking....
The
AuthUserFile should be the location of the password file you just created. This can be absolute or relative (I believe).
AuthName is normally shown by the browser when asking for the username and password.
Hope this helps! :) if you found this helpful, you can
contribute £1 to me!
Some of you have heard of him, some of you even helped pay for him, but none of you have sent him a message....
I know what you might say - why are you using MS Word, when you could use LaTeX?!! (DS, TH, GG, AG, Etc.)
I came across Google Sky when playing around with Google Earth! I wonder whether this was in response to Microsofts World Wide Telescope?
I've recently been procrastinating with a Jabber Server - or more precisely an instant messaging server that supports the XMPP IM protocol. 
I realise now why I didn't bother finishing my GNVQ Level 3 in business which I took after my GCSE's. It's because studying business is probably the most boring thing I can think of!