Authentication | Laszlo Molnar

Tag 'authentication'

Password protected website area with Apache digest authentication

June 18, 2009

Digest authentication is more secure than Basic authentication, because using digest authentication, your password is never sent across the network in the clear, but is always transmitted as an MD5 digest of the user’s password. In this way, the password cannot be determined by sniffing network traffic.
Resources:
Debian 5 Lenny
Apache 2.2.9
Enable mod_auth_digest and disable mod_auth_basic
Apache module [...]

Web Development

How can you protect your Joomla! administrator directory with a password?

July 28, 2008

If your hosting provider doesn’t give you any directory password protection tool, but you want to protect your Joomla! admininistrator directory with an encrypted password, do the following.
1, Create an empty file .htaccess in your Joomla! administrator directory. Put the following lines in it:
AuthType Basic
AuthName “Joomla Administrator”
AuthUserFile /full/path/to/joomla/administrator/.htpasswd
<Limit GET>
require valid-user
</Limit>
Modify the /full/path/to/joomla to your Joomla [...]