Password protect Chevereto with .htaccess

[Roahog]

Hi all,

just tried to protect my Chevereto Installation with the .htaccess file.

AuthName "Restricted Area"
AuthType Basic
AuthUserFile /etc/apache2/htusers
AuthGroupFile /dev/null
<Files *.php>
require valid-user
</Files>
<Files *.js>
require valid-user
</Files>

ServerSignature Off
Options -Indexes

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^api$ api.php [L]

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . index.php [L]
</IfModule>

ErrorDocument 400 default
ErrorDocument 401 default
ErrorDocument 403 default
ErrorDocument 404 default
ErrorDocument 500 default

In Firefox it works great in chrome I get an error message:


In Firefox a windows security dialogs pop-up and reask for the password. At the same point chrome popup with this error message.

Any suggestions?

Best regards,
Magnus

 

[Rodolfo]

What is the site url?

 

[Roahog]

i.nud.ms

 

[Rodolfo]

It's a problem in your server, My firefox doesn't ask for userass it just shouts the 401 page.

 

[Roahog]

add index.php and it works. So maybe the rewrite rule?

 

[Rodolfo]

Nope, I have remember why this shouts a error.
When you set a userassword that appy for the curren "client". The uploader used on Chevereto is a flash uploader meaning that the request that the flash file does to the server it counts like another "client" and since this client doesn't have the credentials the system shouts an HTTP error. In firefox you get a window that ask the userass but in Chrome you don't get that, it doesn't give you the option to submit the userass.

Thing is that since the uploader is another client, there is no workaround for this at least without doing major tweaks in the current uploader (Chevereto will drop uploadify on 3.0).

But you can trick the system, having a userass for uploadify and call the uploader using http://userass@mysite.com/upload.php in the ajax call should work.

 

[Roahog]

So, is it my webserver or is it a combination of chrome and the upload mechanism?

Best regards,
Magnus

 

[Piers]

So, is it my webserver or is it a combination of chrome and the upload mechanism?

Best regards,
Magnus

It is your configuration.

 

[Rodolfo]

So, is it my webserver or is it a combination of chrome and the upload mechanism?

Best regards,
Magnus

Nop, is the browser that doesn't understand to request a password and the system that doesn't provide that password. Chrome have always works like that so if you want to have chrome compatibility soon the best that you can do is create a userass for uploadify and tweak the javascript code in Chevereto.