Re: [development] Apache restriction for admin interface...
Date: Fri, 2 Oct 2009 06:02:31 -0600 From: Cameron Eagans <cweagans@gmail.com> Subject: Re: [development] Apache restriction for admin interface... To: development@drupal.org Message-ID: <b83a0f600910020502j5c528760wb507a04c6d91c1c4@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1"
Why not use http://drupal.org/project/securesite ? ----- Cameron Eagans Owner, Black Storms Studios, LLC http://www.blackstormsstudios.com
<sigh /> <blush /> :^) I honestly did search high and low for something like that, I thought it was odd nobody had already done it. Thank you! -- Regards, Phil
On Fri, Oct 2, 2009 at 6:12 AM, Philip Mather <phil@philipmather.me.uk> wrote:
<sigh /> <blush /> :^)
I honestly did search high and low for something like that, I thought it was odd nobody had already done it. Thank you!
I don't know that I would be so quick to blush - that ties you to Drupal's user system which may or may not be desirable. The Apache basic authentication system is well known and well tested. One benefit to the Apache technique is that you could combine it with other requirements like "only from certain IP addresses" so that you know that people who login have the right username, password and IP. Regardless of whether it is useful in every case - thanks for sharing! Regards, Greg -- Greg Knaddison | 303-800-5623 | http://growingventuresolutions.com Cracking Drupal - Learn to protect your Drupal site from hackers Now available from Wiley http://crackingdrupal.com
participants (2)
-
Greg Knaddison -
Philip Mather