Admin Panel 2: Private Server Configuration: Difference between revisions

{{Uc_nav_apanel2}}

This page allows you to set-up a username and password making your web page server private (restricts access to the root folder www). To use this feature you need to activate it in the file /www/.htaccess I have provided a detailed description how to do this see below.

'''Defaults'''

After saving your user name/password pair you can find them in file '''.htpasswd''' this file is located in folder '''*\Uniform Server\udrive\htpasswd\www'''

The file looks like this:

# This file provides security to the server limiting access to the localhost only.  

# Comment to deactivate.

# Defaults: Username - root; Password - root

#AuthType Basic

#AuthUserFile /htpasswd/www/.htpasswd

#Require valid-user

I have split the above into three sections, describing each section in detail at the end I combined all three section.

'''''[[#top | Top]]'''''

Deleting the htaccess file is a bit draconian you loose flexibly and control for example lets look at the first section of this file.  

'''Section 1)''' The last three lines are commented this means they are inactive and not protecting the folder or its sub-folders

Alternatively you could delete all lines in this section the effect would still remain the same.

My real point using just three comments you have put your server online, remove the comments and you are back to square one, its that flexibility I am talking about. Delete the lines next time you wish to use them you may have to look up the format for the commands. Lets look at those three lines in more detail.

Now we make one exception '''Allow''' from port '''127.0.0.1''' this is '''localhost IP adress''' (the PC that Apache is running on)

'''Section 1)''' The last three lines are uncommented this means they are active and protecting the folder, where .htacces resides and all its sub-folders

'''''[[#top | Top]]'''''

To allow execution of scripts you use the following option +ExecCGI the default is –ExecCGI  

'''Section 2)''' Allows scripts execution

'''Section 2)''' Comment the lines as shown to disable script execution

'''''[[#top | Top]]'''''

The final section of htaccess deals with user name and password protection by default this is disabled. If you have put your servers online (see section 1) anyone on the Internet can view your web site. If you have restricted your server to localhost (default) anyone with access (physical) to your PC can view your web site.  

'''Section 3)''' Comment to disable user name password access to your web site default setting on installing UniServer.

Uncomment the last four lines to enable password protection. Any user trying to view your web site will be requested to enter a name and password. This is the name/password pair you entered for your personal server.

Please note this section is independent of the settings in section one hence authentication will be required.

'''Section 3)''' Uncomment last four lines as shown to enable user name password protection.

[[Image:Uc_password.gif]]

The complete htaccess file is shown below. It is currently configure to allow localhost access (section 1), to run cgi scripts (section 2) and require user authentication (section 3).

'''Section 1)''' To put your servers online comment the last three line in this section.

The default setting is for localhost access, you can remain connected to the Internet only your local browser will be able to view and access your web-site server.

'''Section 2)''' The default is to allow execution of scripts.

If you do not runs CGI scripts comment out the last two lines in this section.

'''Section 3)''' For a personal web server the last four lines have been uncommented. To access your web site a user must supply coreect user name and password.

To disable this comment the last four lines. This allows every one access with the restriction set in section 1)

   

'''''[[#top | Top]]'''''