hello again - new question regarding SAWBUA

basically, I have created a very basic members only area - by password protecting the /members folder

 

the current system is: a new member registers (we are not expecting many) via the register form, requesting a user/pass etc - we then manually assign their request via cPanel WebProtect then email them back confirming their request - they can now log into the members only area

 

firstly, could someone confirm that they cannot gain access to this members folder without a user/pass

 

secondly, .htaccess does not seem to offer a logout option - a bit of research suggests that due to .htaccess not understanding the concept of a 'session', this is not an option (without some kind of fiddly fix with fakeuser:fakepass which doesn't work on IE anyway)

 

so, it seems... once a new user has signed in, they are logged in for life?! (i can't even log myself out)

finally, what is the next step (the simplest one) for setting up a proper members area - I fear it might be to do with MySQL/PHP which I have never used - although they are features on the UK2 hosting - offering a MySQL database wizard and phpMyAdmin

I can see the stuff in your members section.

 

http://www.tutorialtastic.co.uk/tutorial/p...sionbased_login might be worth a read.

thanks for the link Rachel - I will take a look through

 

any idea how come you can see the content of my password protected folder?!

duh, would have helped if i had saved my access settings - should be protected now

by the way, if you click Cancel when asked for user/password, you are sent to a very ugly Authorization Required page

is there any way to redirect to my own, slightly friendlier, auth req page?!

 

cheers, eighty0ne x

It's not that user-friendly because you're doing it with .htaccess. Try the tutorial I linked you to.

thanks Rachel, much appreciated - I have had a quick look at that tutorial - reckon it will take me a while to understand and implement - tbh, I am a bit scared of trashing the site - PHP looks like a whole new bag of things I can mess up! seriously though, I will build up my confidence and give it a go at some point - in the meantime, does anyone have an answer to the .htaccess Auth Req redirect issue? is this possible? as it would be a short term resolve for the site owner...

Ok I took a quick scan, but does each user need there own folder, or is it just one folder wher ethey all get access with there own password/username?

Ok I took a quick scan, but does each user need there own folder, or is it just one folder wher ethey all get access with there own password/username?

 

hi Thomas, thanks for taking a look - the answer is the second option, just one folder but each member has their own pass/username giving them access

 

apart from the grim redirect Auth Req page, which appears if/when a user enters the wrong details or clicks Cancel at the prompt, the current setup is ok (for now) unless there is a very simple 'better way' (?!)

 

cheers ~ eighty0ne