• Web Applications
26 May 2008

Htaceess Editor Online

Cpanel is not the big deal, actually. If you desire to learn how you can Webmaster your personal site, which I extremely suggest you accomplish, you will have to face dreaded cpanel. I speak this tongue in the cheek since it is not actually that big deal.

I give advice those who are studying how to Webmaster their personal pages to start with FrontPage. It is a flexible wysiwyg (what you observe is what you obtain) program. It has power and functionality that you need, and you do not need to identify the speck of html. Not the speck. I am wysiwyg type of guy. I hold up crosses to the html. Crosses and the garlic.

First of all, what is cpanel? Cpanel is nothing but page you go to and offers you the controls on server that hosts your web site:
The server has web site. I make use of Bluehost. Thus I go to Bluehost site. I then type in my domain name also my password, enter, and get there at my c-panel.

Cpanel will have set categories of tools you may use or will use to change on your web site on server’s side of things. Imagine of it this mode: You have computer. You have server. You have files. You send out those files to server. In principle, you can alter files on your web site by server’s end of things. The example of when you will do this: with the blog. Files of the blog can be on server’s end as well as never on your PC. But that’s one more topic. Back to cpanel.

Cpanel can tell you lots of things. You can achieve many tasks here, lots of fix-its that you can do with the help from support on server end. Mostly, what you require to know, above all if you are utilizing FrontPage, that is, again, what I direct if you are starting, to install FrontPage addition. This is very easy. All you need to do is just click on button says “FrontPage extensions” on cpanel. On Bluehost cpanel, icon looks like the little block of the four-associated puzzle pieces that I suppose is to look like Microsoft logo.

This will be in “advanced” area of panel. Does not let that fright you? There is not anything advanced about procedure of installing the extensions. You click on icon. Up comes the page, which tells you how the FrontPage extensions are exactly installed as well as which ones are not installed. If you have over one domain, you will observe them all here. You select domain where you desire to install extensions, and you put in them with click of the mouse. As a result, you have installed extensions. Not very much to it. This will permit FrontPage to then upload to the domain. That’s it.

Sometimes extensions fail. You need to uninstall them, just like the other software. This occurs typically when you left your web site alone for some time. You have not been publishing. It is as if domain and server overlook about you. I do not know what occurs and why it takes place in this way. It does not matter. What matters is you can uninstall as well as reinstall with the minimal problems. If you installed the web security, you have to install it again. This will all be obvious. The web page on which you put in extensions will provide you this information. Page also informs you that “if you don’t install, any. htaccess files that you will have to reinstall”. If you blog on your web site, this can affect your blog. If uninstall and reinstall influence blog, server support can assist correct this stuff. By way, you are saving blog. Right?

The other major function cpanel offers is to inform your domains what you would like them to do. You can also have the sub-domain end to your chief domain. You can include the point to it. You can do zero with it. Why will you do that? Since you have not built the web site for it or have not made the point to one more web site of yours. You have just bought domain and is sitting there.

One point about purchasing domains: aim to do that with server who you have resolute will host your web site. It is the pain to move a domain. That verses, unfortunately. Unluckier is your option to buy the domain through somebody other than a reputable server who presents good support. Transferring the domain is not the huge pain, however there’s time concerned. It is much simple to buy domain through the host, and then do whatsoever you want with domain when you have bought it.

The way basic account works at the Bluehost, and lots of other servers, is you get the main domain. All rest of domains gets heading for through main one. So you can make a fresh domain, and will look, for all the intents as well as purposes, as if new domain is its personal domain. It will not at all look to be the appendage of main web site, although it will be. If buyit.com has one more domain - say name is pleasebuyit - it can show up as the pleasebuyit.com, and not buyit.com/pleasebuyit.com, though the server will consider buyit.com as main site. This, you manage through cpanel. On Bluehost, this image is named “domain manager”.

You have countless stuff that you can do on cpanel, however nothing is as vital as what I have talked about. You can make sure your stats, that is to say, you can observe who has arrived to your site and what they are clicking on and how long they are looking on your site, all that. This is certainly valuable information, simply accessible through cpanel.

It’s precious information. However not knowing this data is not going to boast any affect on your web site looks like or else if it is up.

And that’s it. Not a big deal. You will be doing major part of your job as the Webmaster on your PC using FrontPage.

Do you want to control the access to directory or else file on your web site?

Well, it is actually very simple to do using the .htaccess file located in that directory of your web site.

Thus what is this .htaccess file? The description of the .htaccess file as affirmed on Apache web site is
.htaccess files (or “distributed configuration files”) give a way to create configuration alteration on a per-directory basis.

Basically it allows you to make configuration alteration to functionality of web server, however on per directory basis.

OK, lets do this by now.
First, login through SSH to server hosting of your website.
Change to directory, which you will like to limit access to, or make it if it doesn’t already live.

In that directory we will create.htaccess file.
Using favorite text editor make and open up this file.
# vi .htaccess

*Note: check you have dot ( . ) at beginning of a file.
That tells web server not to permit web browsers to just access file as they will in any other file on the site.

Enter following text into a file
AuthName “Authorized Users Only.”
AuthType Basic
AuthUserFile /etc/httpd/conf/.htpasswd
Necessitate user testusr

You can alter ”testusr” to anything username you like to access directory.
What these outline essentially mean are
AuthName - title of the login box which pops up while somebody try to access directory
AuthType - The kind of processing authentication kind to make use of ’Basic’ being most common.
AuthUserFile - location and name of file where we store our username and password information.
Require user - the space separated list of the users to agree to access this directory (we’re allowing one user).

For other guides I suggest visiting to howtomonster.com

Next, we will create actual user.htpasswd file that we specified in .htaccess file.
If.htpasswd file doesn’t exist in /etc/httpd/conf/ then we will make it and add user with
# htpasswd -c /etc/httpd/conf/.htpasswd testusr

If file does exist then we do not want to make use of the ‘-c’ option, so utilize the command
# htpasswd /etc/httpd/conf/.htpasswd testusr

Whichever way, you will be encouraged for password twice after performing the command.
Enter password you desire to use (keep in mind, you will not see password that you’re typing).

Also, you must probably set ownership on.htpasswd file
# chown apache:apache /etc/httpd/conf/.htpasswd

We have.htaccess file set to inform Apache to limit access, and we have.htpasswd file in rest to tell Apache about users/passwords which exist. One more thing that we require to check.

In your /etc/httpd/conf/httpd.conf file, locate the line that has
AllowOverride None
This line must be someplace underneath line. Change it to
AllowOverride AuthConfig

This tells the Apache to permit your web site to supersede global authentication settings with settings in your .htaccess file.
Save file and restart Apache with
# /etc/init.d/httpd restart

Now, presumptuous that all go well you must have the password-secluded directory on your web site. All that is left is to ensure you have the file in that particular directory and then aim to access it from the web browser.

It must prompt you for the username and the password.

Voila!
Prior to the authentication methods that can be discussed, authentication must be defined. So on whole we are deciding someone or something is, and who or what it is affirmed to be.

For this causes, Internet business as well as many other transactions need a sturdier authentication move toward. The use of the digital certificates subjected and verified by the Certificate Authority (CA) as the part of public key communications may become standard in processing the authentication on Internet.

There are three main methods by which the human can authenticate himself or herself:
1. Something about user is recognized as sole
2. Something user possesses is sole
3. Something user knows the password or PIN is sole

Also, the combination of techniques is used, for example, bank card and PIN, in that case the term “two factor authentication” can also be used.

In law enforcement world, the fingerprints are used as most reliable method of the authentication, however recent court cases have distrust their dependability (as have the retinal and the fingerprint scans).

In computer surroundings, cryptographic techniques has developed that are currently very dependable if user’s key has not compromised.

The directives to make protected area that can be placed in.htaccess file in directory troubled, or in section in access.conf file.

To permit a directory to be controlled within an .htaccess file, one should verify that access.conf file permits the authentication to set up in an .htaccess file. This is also controlled by AuthConfig supersede. access.conf file must include AllowOverride AuthConfig to allow the authentication directives that is to be used in an .htaccess file.

To restrict the directory to any of the user listed in users file just made, one can make .htaccess file having:
AuthName “restricted stuff”
AuthType Basic
AuthUserFile /usr/local/etc/httpd/users
Need valid-user

These are a few online authentication techniques because, unluckily, people do not trust Worldwide Web for safety of their currency transactions. With amplified trust in safety of the online processing get benefits for business owner that include better profitability and enhanced business and customer relationships. As well as benefits the consumer with further convenient bill sum processing also account access.

1. Backup your web site on server.
If you have over one important web site, place them on the different web hosts. Do not rely on web host for backups.
Find two diverse hosts that allow SSH access. Get the account with every. FTP the backup of one web site to other server straight, and vice versa. Download the copies to your home PC as well.
2. Put the file called ‘index.html’ in each major or significant directory in your web site, if it does not have one.
This stops people by trying to peek at the other files in same directory.
3. Don’t use old translation of FormMail. Do not make use of scripts, which are newly free, unless you identify how to ensure for security holes.
They must filter input like the symbols \,#, or >. Search on terms ‘The Script Name microbe’ or else ‘Script Name security’.
4. Rename any of the email scripts that you download prior to installing them.
Why give the spammer the clue since to what your script is, also what it can perform?
5. Do not offer files or else directories clear names, such as ‘emails’, ‘pass’, and ‘orders’ and like.
Once more, why make it simple for snoopers?
6. Do not go away with unencrypted, secret information on your server.
It is only the PC in a room God knows who is having access to it.
7. Use the popular web host.
That cheaper one may be the uninterested reseller. There Google Page Rank provide the clue as how well liked they are. Send them the email. See how much time it takes to get the reply. Check out forums; how much busy are they? They do not have the forum? Next!
8. Suppose you are setting up the .htaccess files or else any other kind of password protection, make use of long as well as varied passwords.
“Ch33s3And0n10n” is more secure than “cheeseandonion”, and as memorable. Make password at least 8 letter in length, having letters and numbers, and upper plus lower-case letters. Brute-force cracking programs can guess ordinary words.
9. Strip scripts down to bare basics. Upgrade them frequently.
Programs such as PHPNuke have many features in default install. They let webmasters as well as users lots of control on web site content. This makes vulnerabilities. The ‘Nuke site of mine hacked during the Christmas, by Arabian group. Luckily, I had the backup. I did not have the fast internet access, at time, to improve it. I only required one module functioning, so I detached inessential ones, as well as distorted file permissions on admin part. At time of writing, I am waiting to observe what happens after that!
If you do not truthfully require it, turn it off.
10. Be cautious what you speak about the other people or else products on your web site.
Not actually security, however… people are extremely touchy about censure. ‘Flame wars’ are the squander of time and energy, so stay away from them.

htaccessEditor - Online .htaccess Files Creator
.htaccess is the text file having commands that teach web servers how to perform in some situations, providing the way for you to create configuration alteration on per-directory basis.
.htaccess Editor allows you to simply create .htaccess files on net without learning complex .htaccess rules. With .htaccess editor, you can make .htaccess code that includes:
Basic authentication – That is used to specify security restrictions for particular directory.
Custom error pages – It redirect the visitors to main page that match your web site design instead of the standard server error pages.
Password protection - They restrict access to some directories by giving a password to view contents.
Default pages – It set the default pages on the directory-by-directory basis.
Redirect directives – It redirect requests for the specific file or else directory to the new destination.
Access restrictions - enabled or denied some addresses.
Making .htaccess files has by no mean easy with .htaccess Editor.
jpg

Tags:

Cette entrée a été posté le26 May 2008à9:57 PM et est archivé sous Web Applications. Vous pouvez suivre les réponses de cette entrée à travers leRSS 2.0feedback. Vous pouvez laisser une réponse, ou des traces de votre propre site.

Laisser une réponse

Name (*)
Mail (will not be published) (*)
URI
Commentaire