Comments on: Update: AskApache Password Protect Plugin http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html Web Development Sat, 30 Aug 2008 04:42:17 +0000 http://wordpress.org/?v=2.6.1 By: Robert http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-43298 Robert Thu, 17 Jul 2008 16:56:30 +0000 http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-43298 @ Ivan. After having installed the plugin, I couldn't use the Windows Live Writer any longer. All I got was a "403 forbidden" error. Then I played around with activating and deactivating the security modules in the plugin configuration. Now I know at least one thing for sure: The module "1022 BAD Content Type Denies any POST request with a content type other than application/x-www-form-urlencoded|multipart/form-data" blocks WLW. I deactivated it - now WLW has access to my blog again. @ Ivan. After having installed the plugin, I couldn’t use the Windows Live Writer any longer. All I got was a “403 forbidden” error. Then I played around with activating and deactivating the security modules in the plugin configuration. Now I know at least one thing for sure: The module “1022 BAD Content Type Denies any POST request with a content type other than application/x-www-form-urlencoded|multipart/form-data” blocks WLW. I deactivated it - now WLW has access to my blog again.

]]> By: Brad Beckett http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-42592 Brad Beckett Wed, 25 Jun 2008 10:38:08 +0000 http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-42592 I figured it out... you have to FTP in and make sure all your .htaccess files in your mail /public_html/wp-admin/ is CHMOD 755 and /public_html/.htpasswda1 file is also CHMOD 755 Works for me! I figured it out… you have to FTP in and make sure all your .htaccess files in your mail /public_html/wp-admin/ is CHMOD 755 and /public_html/.htpasswda1 file is also CHMOD 755

Works for me!

]]> By: highhopesgardens http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-40854 highhopesgardens Fri, 16 May 2008 02:46:01 +0000 http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-40854 I added the askapache password plugin to my 2.5.2 wordpress blog hosted on Yahoo (never found any warnings in install documentation on Wordpress against this) and now I cannot access my dashboard to remove the plugin (or do anything else on my blog). There are not any .htaccess files or password files that I can see in Yahoo file manager or filezilla. After I installed it and gave user name and password, the first login, it refuses my username and password and I'm locked out of my own blog. How can I fix this, short of blowing everything away and reinstalling Wordpress and my backups? I added the askapache password plugin to my 2.5.2 wordpress blog hosted on Yahoo (never found any warnings in install documentation on Wordpress against this) and now I cannot access my dashboard to remove the plugin (or do anything else on my blog). There are not any .htaccess files or password files that I can see in Yahoo file manager or filezilla. After I installed it and gave user name and password, the first login, it refuses my username and password and I’m locked out of my own blog. How can I fix this, short of blowing everything away and reinstalling Wordpress and my backups?

]]> By: Lauren http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-37575 Lauren Tue, 25 Mar 2008 23:01:20 +0000 http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-37575 I installed your password plugin, not cannot get into admin panel. Did all you suggested, but cannot bring up admin... what did I do wrong? thanks lauren I installed your password plugin, not cannot get into admin panel. Did all you suggested, but cannot bring up admin… what did I do wrong?
thanks
lauren

]]> By: Andi http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-37020 Andi Sun, 09 Mar 2008 19:05:43 +0000 http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-37020 I get the error <pre><br /> Warning: Wrong parameter count for sha1() in /public_html/sitename/wp-content/plugins/askapache-password-protect.php on line 532<br /> </pre> I get the error

Warning: Wrong parameter count for sha1() in /public_html/sitename/wp-content/plugins/askapache-password-protect.php on line 532
]]> By: norvo http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-36487 norvo Sat, 01 Mar 2008 23:24:37 +0000 http://www.askapache.com/wordpress-plugins/securing-htaccess-plugin.html#comment-36487 hi, great idea for a plugin. however, like a lot of the others i read in the comments, i also get a 404 page and can not access the wp-admin directory. nor does it prompt me for a username or password. any fix for this? it would also be great if you could add something like this to the .htaccess file in the root of the blog directory (seperate from the other wordpress variables: <code><br />  <br /> Options All -Indexes<br />  <br /> RewriteEngine On<br /> RewriteBase /<br /> RewriteCond %{THE_REQUEST} /(wp-includes|wp-content)/.*\ HTTP/<br /> RewriteCond %{HTTP_REFERER} !^http://(www\.)yourdomain\.com/.*$ [NC]<br /> RewriteRule .* - [F]<br />  <br /> </code> this would exclude people for browsing or direct calling the plugins or template stuff except for the blog software itself. just a thought :) hi, great idea for a plugin. however, like a lot of the others i read in the comments, i also get a 404 page and can not access the wp-admin directory. nor does it prompt me for a username or password. any fix for this?

it would also be great if you could add something like this to the .htaccess file in the root of the blog directory (seperate from the other wordpress variables:


 
Options All -Indexes
 
RewriteEngine On
RewriteBase /
RewriteCond %{THE_REQUEST} /(wp-includes|wp-content)/.*\ HTTP/
RewriteCond %{HTTP_REFERER} !^http://(www\.)yourdomain\.com/.*$ [NC]
RewriteRule .* - [F]
 

this would exclude people for browsing or direct calling the plugins or template stuff except for the blog software itself. just a thought :)

]]>