[LUAU] apache security question

Charles Lockhart lockhart at IfA.Hawaii.Edu
Tue Feb 8 13:43:11 PST 2005


We've got a web server running FC2 and Apache 2.  I was asked to set up 
a private wiki area on that server, one that provided both 
username/password security for the wiki, and the same level of access 
for the directory.

So, we have a script or something that every time you create a directory 
in that secure directory, the script adds an .htaccess file, and the 
.htaccess file is used to enforce privacy, requiring a username and 
password to log in.  I'm told that this should be secure enough to keep 
people from accessing the private area, and to prevent information from 
turning up on Google + etc.

So my question is, is that correct?  I have no webmaster experience, and 
very limited privacy/security experience, so I'm not setting that up, 
our network admin is, but I figured I'd get a second (third, fourth, 
fifth...) opinion.

Thanks in advance,

-Charles



More information about the LUAU mailing list