htaccess

[refertech]

I've been looking for a htaccess hack that prompts a user to enter there user and pass from the board prior to logging in the main board. I know there is one somewhere I just couldnt find it. I did find this one but it appears to be dead and it was a post that someone who had tried to take credit for something that wasnt his. So if some could point me in the right direction thanks. I'm still sort of a newbie so bare with me.

Click me to see the only think I could find here!!!

[refertech]

Sorry mods, I found serveral things on the board that i didnt see eariler. No sure which one will work for me, but ill keep looking.

[NTLDR]

Here is the basic contents that are needed. Apache needs to be compiled with mod_mysql_auth if I remember correctly:

AuthType Basic 
AuthName "*My Forums*" 

Auth_MYSQLhost *myhost.com*
Auth_MYSQLusername *username*
Auth_MYSQLpassword *password*
Auth_MYSQLdatabase *dbname*
Auth_MYSQLpwd_table user 
Auth_MYSQLuid_field username 
Auth_MYSQLpwd_field password 
Auth_MYSQL_EncryptedPasswords off

<LIMIT GET POST> 
require valid-user 
</LIMIT>

Remember to change the items bettween the * * to your values.

Hope this helps.

[TECK]

not all hosts support that mod, unfortunatelly. mines doesnt...

[refertech]

I'm so new to this that I dont really understand what that is.

Any way you can explain it to a child. sorry

[Dolby]

is there somthing you can add so you can only allow certian usergroups?

like add somthing... where usergroupid = 1 or any number(s) you wish.

[BigSjedow]

oke but what to do if the passes are encrypted ??

just

AuthType Basic 
AuthName "*My Forums*" 

Auth_MYSQLhost *myhost.com*
Auth_MYSQLusername *username*
Auth_MYSQLpassword *password*
Auth_MYSQLdatabase *dbname*
Auth_MYSQLpwd_table user 
Auth_MYSQLuid_field username 
Auth_MYSQLpwd_field password 
Auth_MYSQL_EncryptedPasswords on

<LIMIT GET POST> 
require valid-user 
</LIMIT>

[NTLDR]

This line:

Auth_MYSQL_EncryptedPasswords on

Suggests to me that it will convert the password to the MD5 hash before checking with the DB.

[madhouse]

Ok i have a question also about this, we have added this module mod_mysql_auth to our apache machine but when we create the .htaccess file with the code above it sends the 500 error page.

There were some addtional code lines that we had to add that we missed but its still doing the same thing...Is there any other addtional lines that we need to add to make this work ?

[refertech]

Ok, let me get this straight. I first have to check with my host and make sure they support the mod_mysql_auth and then create a file named .htaccess with the above info and placed where on my server? Root web directory?

Mark