Coding .htaccess (Page 2 of 3)

Isn't it eaiser just to have .htaccess/.htpasswd combination?

no i mean how can anyone find the forum without knowing the URL to it?

If the site is invitation only, why not have a front page that requires a log in? Then have punbb and your other site's login elements cookie based, and when a specific user logs in, it automatically sends the proper cookies.

Ok, I may be a little paranoïd, LOL, but if you type www.mywebsite.com/forum/index.php or more directly, www.mywebsite.com/forum/register.com, you access to the register page which allows you to register then acces to the forum.

You will tell me that people must know how is organized the website/forum. You're right. What I wanted to do was just a - little bit more - secure access.

But it seems to be much more harder then I thought...

Yes, this is a nice idea, but as I told you, the website is make dynamicaly, has its own login page (which I wish to keep the look, but I don't know how works the login stuff), and I don't know anything about coding...

But, logging once to the website and to the forum at the same time would be great, but might be more difficult then just ingrate a referer inside the "Meta Refresh"... for who knows how coding a .htaccess

No problem Connorhd
I did simply not read you saying that before.

But, I don't know if the following deals with your quoted sentence above, but I confirm that the .htaccess below works fine, except  for the "Meta Refresh".

SetEnvIfNoCase Referer "^http://www.mywebsite.com/" local_ref=1
Order deny,allow
deny from all
allow from env=local_ref

Anyway, thanks for your kind help, and I think that now, you understand what I was wanted to do...

Lim.

You're right zc923. I thing Connorhd caught this point at the previous post

Is it difficult to create a two-places access system, but keeping my login page form ? (There's a login and password windows).

I'm not sure to understand exactly what you mean...

You mean that version 1.2 (which I use) allows to take .htaccess/.htpassword originally used by my website ?

But the .htaccess/.htpassword used by DAlbum is not on the root folder...

I just figured he lucked into a really cool domain name -- http://mywebsite.com/ .

ok lets forget .htaccess its a bad idea, does your current site set a cookie?

simple solution is to set a session or even better a cookie on the homepage then make punbb check for it, if you do it with a cookie then they will only have to visit the main site once which would probably be less annoyiing for your users

just add a little check for the DAlbum session cookie at the beginning of PunBBs common.php

people won't be able to access the forum at all without the cookie