RE: [PHP] Referring URL Authentication



-----Message d'origine-----
De : Robert Cummings [mailto:robert@xxxxxxxxxxxxx]
Envoyé : mercredi 14 mars 2007 16:13
À : Matthew Vickery
Cc : php-general@xxxxxxxxxxxxx
Objet : Re: [PHP] Referring URL Authentication

On Wed, 2007-03-14 at 14:50 +0000, Matthew Vickery wrote:
The situation is as follows:
I wish to protect the entire Website http://www.example.com from
direct URL access. i.e. if someone enters
http://www.example.com into
their browser they get a message stating that they are not
authorised
to access the site. The only way to access http://www.example.com
should be to log into a second site http://www.intranet.com
and follow
a link from within to http://www.example.com.

Are you admin of these machines? If so use firewall rules to filter traffic
allowing only your domain to acces it.. And then setup authentication on
destination server. You'll save yourself some trouble..
If not, what kind of acces do you have on these servers regarding
scripting/.htaccess and server config files?
If you can get to apache config files, lookup the Apache <directory>
directives, you should have some hints in their as to how to limit certain
hosts, to certain domains..

Regards,

Tim

"Programming is a race between people making better and faster programs and
the universe making bigger and dumber people. So far the universe is
winning"
.