htaccess files are ignored by scripts

tjward

Greetings to all,

I am trying to understand the proper usage of htaccess and php.

I’m running Redhat with Apache 1.3
I installed PHP-Nuke version 6

Been having pretty good results in my efforts so far.

I want to secure portions of this site.

In some cases, simply dropping an htaccess file into the module directory works.
The username/password pops up and then you can use the module functions.

In many more cases, adding an htaccess file to a module directory has no effect.
The module functions work and the htaccess file is ignored.

It appears to me that some scripts support htaccess and some do not.

I am working on some fairy basic scripts to open html pages in this php site.
These html pages are located in htaccess protected directories.
The scripts work, the html pages open as desired, but the htaccess is ignored.

Is there code to include in a script that will cause the htaccess file to be used?
My research has found ways to reference users and passwords in the sql database, but what I want is to reference an existing htpassword file of existing users without transferring that user list to another database.

Is this possible?

Thank you folks
Tim

IceD

PHP don't know nothing about .htaccess. It's apache job. If you need to make some part of site secure - just make directory in your htdocs (seq), put .htaccess into it, and move all secure scripts there.

tjward

Hi there, thanks for posting back.

I pretty much tried what you suggest..
I made a separate directory.
put in the php script
put in the htaccess

Then I called it from the main site with this script

<?php
if(!isset($mainfile)) {include("mainfile.php");}
$index=1;
include("secure/index.php");
?>

And it opens the file. even though it is htaccess protected.

I figured.. ok.. php is not ruled by apache.. as you said

Then I tried to access an html file in the same secure directory with this script.

<?php
if(!isset($mainfile)) {include("mainfile.php");}
$index=1;
include("secure/index.html");
?>

and I get this..

Warning: Failed opening 'secure/index.html' for inclusion (include_path='.:/usr/lib/php') in /home/friends/modules/address/index.php on line 7

I remove the htaccess file from the directory though.. and it works.
the html file comes up.

So I seem to be very good at making a php script ignore htaccess, or error on htaccess.

I can just spawn a new browser and do it that way.. I wanted it to be integrated into the site though.. I thought it would look cleaner. I'm still missing something.. got books on the way though 🙂

Thanks

Tim