Solved

How to Password Protect a Web Directory

Posted on 2004-08-18
12
642 Views
Last Modified: 2010-04-11
I want to Password Protect an entire web directory and all subdirectories without having to use include files on every single file.
Can I do this in one location?

Thanks,

-Brett
0
Comment
Question by:brettz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 3
  • +1
12 Comments
 
LVL 1

Expert Comment

by:mgrass
ID: 11834970
What's the OS?
0
 
LVL 2

Expert Comment

by:xscousr
ID: 11835101
and what is the webserver? IIS? Apache?
0
 

Author Comment

by:brettz
ID: 11835130
Sorry, I forgot that critical info.

OS: Windows 2000 Server
Webserver: IIS
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 1

Expert Comment

by:mgrass
ID: 11835177
Right-click the folder where your site resides in inetpub and select security.  Remove any internet guest account or everyone account (that is the anonymous access) that is present.  That will prompt a visitor for NT credentials; once provided they're in.  
0
 

Author Comment

by:brettz
ID: 11835201
Well, I forgot something else.

I want to do this by having users validate through an API script and not Windows NT Authentication.
Is this possible?

-Brett
0
 
LVL 1

Expert Comment

by:mgrass
ID: 11835235
I'm sure it is.  
I don't have a clue how though.  :)
If you will give as much detail as you can, I'm sure some expert will be able to set you right up.

Mike
0
 
LVL 2

Expert Comment

by:tonyhowarth
ID: 11835780
There's a product called Authentix from Flicks software.

It's really good, very easy to install and configure and will do exactly what you require.  It basically installs itself as an asapi filter.  Then you can auto logon someone from you own API (samples provided) or have Authentix challenge the user.

Have used it for years and I would highly recommend it.

Tony
0
 

Author Comment

by:brettz
ID: 11840919
Thanks Tony that looks great, but I don't have the money to buy it.  Only a free trial is available.
Does anyone know of any Freeware that will do this OR has anyone ever done this in their own code?
0
 
LVL 2

Expert Comment

by:tonyhowarth
ID: 11841164
Write it yourself....it's only a ISAPI filter and if you want a basic one that cannot cope with millions of users (like Authentix) then it should be that tricky?

Tony
0
 

Author Comment

by:brettz
ID: 11841370
I would like to write it myself.  The reason I came here is because I don't know how. Can someone directy me to a site where I can learn how to write an ISAPI filter that uses an API logon or view someone's code who has done this to get ideas?

Thanks,

-Brett
0
 
LVL 1

Expert Comment

by:mgrass
ID: 11841449
Lots of ISAPI resources here:  http://www.dataweb.de/en/support/isapi.html
It's just a matter of googling it all up.
0
 
LVL 2

Accepted Solution

by:
tonyhowarth earned 50 total points
ID: 11841457
0

Featured Post

Is your NGFW recommended by NSS Labs?

Ours is! NSS Labs Next Generation Firewall Test gives the WatchGuard Firebox M4600 a "Recommended" rating! Curious where your NGFW landed on the  Security Value Map? See the map and download the full report today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Keystroke loggers have been around for a very long time. While the threat is old, some of the remedies are new!
When it comes to security, close monitoring is a must. According to WhiteHat Security annual report, a substantial number of all web applications are vulnerable always. Monitis offers a new product - fully-featured Website security monitoring and pr…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question