Password database question

[DemonWolfe]

Is there a script out there that will allow me to easily update a password protection scheme (via .htaccess) so that I can use one database to protect more than one URL?

IE: have a name/password database on one domain, that it can check against for access to more than one domains enterance page?

Thanks for any help,

John
DemonWolfe

[Shannon]

If I am understanding this correctly - If it's all on the same machine could'nt you just use the same server path to your htpasswd file from both or all areas you are wanting to protect via simple .htaccess password protection?

[mr. mpg]

Indeed... You can do that.

[DemonWolfe]

Thanks Shannon, you are correct, but I am interested in protecting domains on several servers.

[ProgGod]

easiest way is to set up a mysql server to do the authentication. I know there is an easy way to do this through apache

[toker]

Here is a way you could do it flat text database file on 1 server behind an htacess in the root only allowing your other servers access as with this example. You would keep this server just for auth use and not use it for any other purpose for highest security.

<Limit GET>
order allow,deny
allow from yourdomain1.com
allow from yourdomain2.com
allow from yourdomain3com
deny from all
</Limit>

Now you would read the data file from the other servers to process the auth in a secure enviroment. I would still use encryption over the connection and https if you want to really be secure.

Also i reccomend you protect the actual database from being cracked. This script is only $10 and well worth it and will save you much more then $10 in the long run.
http://www.monster-submit.com/protect/