<div>
&gt; .. let me see what user is logged &nbsp;..<br />
this is not possible with http.<br />
Depending on your application you only may see who has connected, and probably for which user a session has been initiated.<br />
Gest ist to view apache's access_log and error_log, there're countless log-analyzers out in the web.
</div>


> .. let me see what user is logged  ..
this is not possible with http.
Depending on your application you only may see who has connected, and probably for which user a session has been initiated.
Gest ist to view apache's access_log and error_log, there're countless log-analyzers out in the web.

<div>
<div class="content wysiwyg-content">
I have users in website (Apache 1.3.29, Red Hat 9)- &nbsp;using usual .htaccess for password and directory access.<br />
<br />
There are lots of scripts out there. I want something to monitor access to the server to stop brute force password hacking and password sharing. Also let me see what user is logged in and where they are looking.<br />
<br />
Just want a recommended script really. Any suggestions as there are so many?<br />
<br />
N
</div>
</div>


I have users in website (Apache 1.3.29, Red Hat 9)-  using usual .htaccess for password and directory access.

There are lots of scripts out there. I want something to monitor access to the server to stop brute force password hacking and password sharing. Also let me see what user is logged in and where they are looking.

Just want a recommended script really. Any suggestions as there are so many?

N

Apache .htaccess - stop password sharing and brute forcing

The Linux operating system, in all its flavors, has its own share of security flaws that allow intrusions, but there are various mechanisms by which these flaws can be removed, generally divided into two parts: authentication and access control. Authentication is responsible for ensuring that a user requesting access to the system is really the user with the account, while access control is responsible for controlling which resources each account has access to and what kind of access is permitted.