Urgent .htaccess problem

[kid_c]

I have two websites, site1 and site2.

site1 loads content from site2 in a frame. Now this content is password protected on site2 by a .htaccess

I have the following lines and can't figure out why when site1 loads the frame, it prompts for user/pass.

SetEnvIf Referer '^{http://([a-z0-9-]+.)site1.com/.'} refok

AuthName Members_Area
AuthType Basic
AuthDBUserFile /usr/local/www/data/passwd/site2.com.dat

<limit GET POST>
order allow,deny
satisfy any
allow from env=refok
require valid-user
</limit>

Can anyone help ??

[goldbug]

This probably isn't the right answer, but this problem might not be related to the htaccess itself, actually. My question: are you using IE to test this? If so, it will always prompt for user/pass when a (basic) authenticated site is loaded into a frame. Part of IE security "features" where it treats it in the same realm as a cookie or something--can't load in a frameset. Dunno, I had problems with basic authentication in framesets before, and it turned out to be IE's fault. (opening a new window for IE only seemed to fix it.. as horrible a hack as it was)

My 0.02

[kid_c]

Thanks for the reply, it's a problem in all browsers though ;/

[goldbug]

Dang, lemme know what you figure out. I like to see any resolutions of funky htaccess issues 🙂