.htaccess issues

New Member Joined: Dec 21, 2004 Posts: 7

well I searched but didnt find any answers so if I missed it, please direct me to the post.

I installed NukeSentinel(tm) 2.1.3 for the 7.6 ver of nuke.
(Im running platinum)
Everything else works but the .htaccess and .staccess files dont work.
I have frontpage extensions on and the .htaccess file in there has a different way it validates, so when I use the ones that come with the download I get an access denied error.
Im not too good with htaccess files so any help would be appreciated

This is the htaccess file that works and allows access to my admin section

Code:

# -FrontPage-





IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*





<Limit GET POST>


order deny,allow


deny from all


allow from all


</Limit>


<Limit PUT DELETE>


order deny,allow


deny from all


</Limit>


AuthName www.lcn-ut.com


AuthUserFile /path/to/public_html/password.pwd


AuthGroupFile /path/to/public_html/group.grp








RedirectMatch permanent ^/login.htm$ http://hagii.com

When I upload the ones with sentinel, do I have to manually add my ip in there to get in ?

I am also getting header out put errors only when using the sentinel portion of the admin, but Im sure that because of the htaccess issue.

Worker Joined: Dec 22, 2005 Posts: 158

I'm not sure what problem you are trying to resolve but to me all of it sounds like a attribute problem. Access denied means that your applicaiton is unable to open the .htaccess file because of file permissions, or that I what has been my experience. Depending upon where you are hosting your system will really determine how to fix that.

Your Sentinel errors don't make a lot of sense, usually you can't even turn on the htauth if the file is not cmoded correctly, but I am not familiar with that version of sentinel.

On a unix or linux system it's the cmod attribute, and I think it has to be 777. Don't quote me on this, I am not an expert. Anyone else want to chime in on what he .htaccess cmod settings should be?

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

You do not need .htaccess or .staccess for HTTP Authentication. If HTTP Authentication appears in your NukeSentinel(tm) drop down box, then just select it and don't upload the .htaccess nor the .staccess file. Now, if you want the banned IP's written to your .htaccess file, then you will need to chmod .htaccess to 777.

Posted: Fri Feb 03, 2006 8:31 am

Interesting . . . what is the purpose of it writing the banned ip address to that file anyway?

Posted: Fri Feb 03, 2006 8:49 am

thanks, I think I tried pointing to my htaccess file but I will look at the chmodding, another thing, I clicked to be notified of replies but never received one ...

Posted: Fri Feb 03, 2006 9:53 am

If you ban the IP in .htaccess, it never makes it to any of your site's pages, ie, it's banned at the site/server level. Otherwise it is banned in MySQL which means the "visitor" has actually gotten into your site and if there is a hole or an addon that circumvents NukeSentinel (doesn't call mainfile.php) then you could have a mucho problemo.

Posted: Fri Feb 03, 2006 9:59 am

Ouch, that makes sense now and I would say it was rather important to be using the .htaccess file. Smile