Next Previous Contents

3. SECURITY MATTERS

3.1 Protecting directories

In Hitweb, several directories shall not be accessible to the world. The administration one (admin/) and the one where the configuration file is located (conf/).

To protect them, you can use an .htaccess file. This type of file is used with an Apache web serveur to secure access to some part of a site.

To set up .htaccess on FREE, you shall read this doc : http://support.free.fr/web/restriction_acces.html

If you are using a standard Apache server, you shall use the following example :

AuthName "Acces Restreint"
AuthType Basic
AuthUserFile /path/passlist

<Limit GET POST>
require valid-user
</Limit>

Where "path" must be the complete path to the passlist file.

And passlist the file where users having access to the protected part are stored. To add new users to this file, you shall use the following command :

htpasswd passlist login

For more information, you could read this very clear explanation (in French) at the following URL :
http://www.infres.enst.fr/~danzart/frames/htaccess.html

3.2 Using ssh for the directory (bookmark) moderation

Soon to come...


Next Previous Contents