calling HTML or Javascript gurus

[vrbaba]

How can I password protect a directory that I am hosting?

I use IIS, but I dont want the username/password to be my computer name/pwd. Just something that I wanna set it to.

Does anyone know how I can do that? or point me to any scripts?
(google is giving me a headache)

 

[bmacd]

http://www.javascriptkit.com/howto/htaccess3.shtml

alternatively, google for .htaccess password.

-=bmacd=-

 

[Gunslinger08]

Make it a virtual directory in IIS and disallow annoymous access in the Directory Security section of it's Properties. You can then create an account specifically for that purpose and have people login using it.

 

[vrbaba]

Originally posted by: joshsquall
Make it a virtual directory in IIS and disallow annoymous access in the Directory Security section of it's Properties. You can then create an account specifically for that purpose and have people login using it.

but that always creates a windows logon account also, right? (which I dont want) well, as long as i can protect remote desktop access to that account, i think i can deal with it

 

[imported_LoKe]

Depends on how secure you want it. 🙂

The quick PHP solution :

<?php
if ($username == 'omg' && $password == 'hai') {
// display page }
else {
echo "Go away, nub!";}
?>

EDIT : Clarified.

 

[Gunslinger08]

Originally posted by: vrbaba

Originally posted by: joshsquall
Make it a virtual directory in IIS and disallow annoymous access in the Directory Security section of it's Properties. You can then create an account specifically for that purpose and have people login using it.

but that always creates a windows logon account also, right? (which I dont want) well, as long as i can protect remote desktop access to that account, i think i can deal with it

Yeah, but it's probably the easiest way.

 

[vrbaba]

Originally posted by: LoKe
Depends on how secure you want it. 🙂

if ($username == 'omg' && $password == 'hai') {
// display page }
else {
echo "Go away, nub!";}

haha...
whts the point when the script is publicly viewable. i think "secure" defines that

 

[imported_LoKe]

Originally posted by: vrbaba

Originally posted by: LoKe
Depends on how secure you want it. 🙂

if ($username == 'omg' && $password == 'hai') {
// display page }
else {
echo "Go away, nub!";}

haha...
whts the point when the script is publicly viewable. i think "secure" defines that

PHP is not publicly viewable.

EDIT : Just noticed, I never mentioned it was PHP. ~_~

 

[KB]

You can use windows login passwords in IIS security (NTLM Windows Authentication or Basic Digest) and just deny the user account "interactive login" rights. This would prevent them from logging into remote desktop.

What is the dictionary in? If it is ASP.Net then you can use ASP.net builtin security.

 

[vrbaba]

Originally posted by: KB
You can use windows login passwords in IIS security (NTLM Windows Authentication or Basic Digest) and just deny the user account "interactive login" rights. This would prevent them from logging into remote desktop.

What is the dictionary in? If it is ASP.Net then you can use ASP.net builtin security.

Ok, im trying to do that now.
Its not ASP.net

Does the directory need to be a "virtual directory"? I have a simple windows directory that I am trying to secure.
I created a new user (group is Users), and unchecked anonymous access. So only thing thats checked is Windows Authentication.
However, its not accepting the username/password (which is correct)