Want to prevent people from viewing the files in a particular web directory ?<\/p>\n
Here are the steps that will enable you to secure a web directory (in this example, \/var\/www\/html\/admin directory or http:\/\/yourip\/admin\/).<\/p>\n
You need to have AllowOverride AuthConfig directive in \/etc\/apache2\/httpd.conf<\/strong> file in order for these directives to have any effect. Look for DocumentRoot Directory entry. In this example, our DocumentRoot directory is set to \/var\/www. Therefore, my entry in httpd.conf<\/strong><\/span> looks like as follows:<\/p>\n Change the value from “AllowOverride None” to “AllowOverride AuthConfig<\/strong>” (or “AllowOverride All” if you want to change other, non-authorization related options).<\/p>\n Save the file and restart Apache :<\/span> Next Steps are to create .htccess and a .htpasswd files :<\/p>\n Your .htaccess file options will look like this:<\/p>\n Protect your .htacess and .htpasswd<\/strong>. (Read this<\/a>)<\/p>\n CHMOD your .htaccess file 644 which translates to rw-r-r<\/p>\n chmod your .htpasswd file 640 (rw-r–)<\/p>\n<Directory \/var\/www>\r\nOptions Indexes Includes FollowSymLinks MultiViews\r\nAllowOverride AuthConfig\r\nOrder allow,deny\r\nAllow from all\r\n<\/Directory><\/pre>\n
\n> sudo service apache2 restart<\/strong><\/p>\n\n
<\/code>yourusername:me7asnd1UpLYw<\/code> (Dont put the htpasswd file inside your webroot for security reasons). -c option is to create a new<\/li>\n<\/ul>\n\n
\r\nAuthType Basic\r\nAuthName \"Protected Area\r\nRequire valid-user\r\nAuthUserFile \/etc\/apache2\/.htpasswd\r\n\r\n<\/code><\/pre>\n$ chmod 644 .htaccess\r\n$ chmod 640 .htpasswd<\/pre>\n