{"id":23874,"date":"2019-01-24T12:16:38","date_gmt":"2019-01-24T12:16:38","guid":{"rendered":"https:\/\/www.knowband.com\/blog\/?p=23874\/"},"modified":"2022-08-13T12:01:14","modified_gmt":"2019-01-24T12:40:13","slug":"password-protection-htaccess","status":"publish","type":"post","link":"https:\/\/www.knowband.com\/blog\/tips\/password-protection-htaccess\/","title":{"rendered":"Password Protection with\u00a0htaccess"},"content":{"rendered":"

Introduction<\/strong><\/h2>\n

It is always a good idea to add password protection to any of the folders\/webpages of your website if you want to restrict access on them. The method for applying the same is more important. We can use PHP for authorizing the information on each page, but that doesn’t protect your images or any other media, does it? So we can use another method known as htaccess password protection<\/strong>\u00a0or htaccess authentication<\/strong>. It is reliable and much easier.<\/p>\n

Objective<\/strong><\/h3>\n

This blog help you know about how to restrict the access to the website from unauthorized users.<\/p>\n

Please follow the steps mentioned below:<\/strong><\/p>\n

Step 1.<\/strong> To use htaccess password protection<\/strong> we need to create two files in the directory in which you want to restrict access:-<\/p>\n

1)<\/strong> .htaccess\u00a0file
\n2)<\/strong> .htpasswd file<\/p>\n

Step 2.<\/strong> Add the following code in .htaccess file that you have created in step 1.<\/p>\n

The .htaccess Code<\/strong><\/p>\n

AuthType Basic\r\nAuthName"No Access"\r\nAuthUserFile C:\/wamp64\/www\/test_project\/self_stitch\/.htpasswd\r\nrequire valid-user<\/pre>\n
Note:<\/strong> You can replace \u201cC:\/wamp64\/www\/test_project\/\u201d with your own directory structure.<\/p>\n
The above code (directives) is described below:<\/p>\n
i.)<\/strong> AuthType<\/p>\n
From AuthType directive you can select the method that is used to authenticate the user.<\/p>\n
ii.)<\/strong> AuthName<\/p>\n
Replace “No Access<\/strong>” to any name as per your requirement. This name will be displayed in the alert box, when the user attempts to open a htaccess protected page.<\/p>\n
The\u00a0AuthName<\/a>\u00a0directive sets the\u00a0domain\u00a0to be used in the authentication.<\/p>\n
Once a client has passed the authentication in the\u00a0“No Access<\/strong>” zone, then there is no need to enter the password to access any other file in the same zone on the same server. Therefore, to prevent a user from entering the password again and again by letting multiple restricted areas to share the same domain.<\/p>\n
iii.) AuthUserFile<\/strong><\/p>\n