Protecting htdocs with password

[MasterCoder]

How do I protect all the files inside htdocs with directory privacy?
I have all of my images and one html file all inside the htdocs folder, without any subfolders. How can I add password protection using the directory privacy option in InfinityFree?

[UnknownLolz]

Hello there,

You can try doing it with htaccess and htpasswd:

Password protecting a directory and all of it's subfolders using .htaccess

[MasterCoder]

It still doesn’t work, even after following their directions.
I do not have any subfolders in htdocs.
This is my htaccess file:
AuthType Basic
AuthName “Please enter username and password:”
AuthUserFile /home/vol9_5/epizy.com/epiz_25837132/htdocs/.htpasswd
Require valid-user
I made my .htpasswd file as specified by the htpasswd generator.
Please help.

[UnknownLolz]

@MasterCoder

It still doesn’t work, even after following their directions.

That’s probably because you did not properly followed the instructions.

This is what your .htaccess file should look like:

<FilesMatch "filesyouwanttoportect.txt">
AuthName "Authentication Required"
AuthType Basic
AuthUserFile /home/vol9_5/epizy.com/epiz_25837132/htdocs/.htpasswd
require valid-user
</FilesMatch>

The AuthUserFile depends on where your .htpasswd is located, you can create one if you don’t have one already.

And for your .htpasswd file should look like this:

username:$2y$10$eRQMs.Kn1qwuOljfMgnX5e3GIhaCRx7QhkVV86AHDzQ/6cVIOmlCW

Which you can generate one using this tool:
https://hostingcanada.org/htpasswd-generator/

====
By the way what’s your problem with the “Directory Privacy” feature in the Control Panel again?

[MasterCoder]

Thank you for the prompt response and your patience.
I have a couple of queries:

• Could you please explain the ‘FilesMatch’ tag? Is it necessary?
• Do I write the name of the file (eg. index.html) next to the FilesMatch tag, or do I create a list of the file names in a .txt file and write the name of the .txt file there?
• Does using a different mode (I used SHA1 in the htpasswd file) affect whether the htpasswd file works or not?

Regarding the directory privacy option, I have no issue per se, but I simply don’t understand how to protect single files. I even tried putting all the files inside a folder inside htdocs (htdocs>my folder> all my files) and then using directory privacy, but it still doesn’t work.

[UnknownLolz]

@MasterCoder

Could you please explain the ‘FilesMatch’ tag? Is it necessary?

Yep absolutely if you want to protect a singe file or multiple files for example any matching files with the name “mysite.html” will be protected if you specify the file name in the <FilesMatch> tag.

@MasterCoder

Do I write the name of the file (eg. index.html) next to the FilesMatch tag, or do I create a list of the file names in a .txt file

Nope it doesn’t have to be a txt file, it will also work with other file extension like .html and .php

@MasterCoder

Does using a different mode (I used SHA1 in the htpasswd file) affect whether the htpasswd file works or not?

Nope but it does affect how secure your htpasswd credentials will be.

@MasterCoder

but I simply don’t understand how to protect single files.

Well you can just manually protect a single file by using the <FilesMatch> tag as what I have aforementioned.

[Admin]

You can use our Directory Privacy tool for it. If you want to protect you entire website, just enter a single slash in the subdirectory field.