Home / server / Questions / 111693
Accepted
Mnebuerquo
Asked: 2010-02-11 12:39:18 +0800 CST

Where should I put my htpasswd file in a plesk domain for use with .htaccess?

  • 772

I've got a path in my domain which needs apache to prompt for a password. I'll be using the .htaccess file to do this, so I can protect or unprotect by adding or removing the file.

I need a place to store the password file created by htpasswd. There are a few requirements.

The apache process can access it to do the authentication. It is outside the document root for better security. It doesn't require changing permissions of plesk created directories. (Optionally) it exists somewhere where the owner of the domain can write to it.

This question assumes Plesk 8.6 and that normal Plesk conventions are followed.

Is there a recommended location?

apache-2.2 security .htaccess htpasswd

2 Answers

  1. Best Answer

    I usually place it in /etc/httpd/ if it's used by multiple vhosts, if only used by one domain then one dir above the webroot would do as well. You can place it in the webroot as well just make sure there's a rule denying access to files with it's naming convention(usually in place by default):

    <Files ~ "^\.ht">
  Order allow,deny
  Deny from all
</Files>
    • 0

  2. I placed it in /cgi-bin. It doesnt seem like it would belong there, BUT it satisfies all of your conditions:

    The apache process can access it to do the authentication It is outside the document root for better security It doesn't require changing permissions of plesk created directories. It exists somewhere where the owner of the domain can write to it.

    • 0