phynam
phynam

Reputation: 465

.htaccess and .htpasswd not working when protecting my site

I have a need to password protect an entire website. I am developing on a live URL (don't ask me why -_- clients...) and I want to be able to develop the site but access it using a username and password so the general public won't be able to see the site being modified.

I've tried to use a .htaccess and .htpasswd file in the same directory.

Here are the contents of it

AuthUserFile /htdocs/.htpasswd
AuthGroupFile /dev/null
AuthName "Development space"
AuthType Basic
Require development

and the .htpasswd file contains the user development:encryptedpassword

It doesn't appear to be working at all. The password box is generated but just carries on coming back up once I enter the credentials (I have confirmed they are correct).

Can anyone tell me where I'm going wrong?

Please note both the htpasswrd and htaccess files are currently within the htdocs directory

htdocs file permissions are drwxr-xr-x

Upvotes: 0

Views: 2156

Answers (1)

Marc B
Marc B

Reputation: 360872

Your Require line is wrong. It should be:

Require user development
        ^^^^--missing

Require can require many different things (env vars, http methods, groups, blah blah blah), so you have to say WHAT kind of thing you're requiring. You might be better off with just

Require valid-user

unless you're going to have multiple accounts in your .htpasswd and want to allow only certain ones.

Upvotes: 4

Related Questions