htpasswd only for upload section

[alfiere]

Dear all,

I have been trying to set up a password ONLY for the upload part, htpasswd and/or LDAP based.

What I achieve is a password request for the upload part AND the download link too...

Seems to be that index.cgi is called from the upload screen and the download link too

Any tips?

Cheers,
Alf

[PilgrimX182]

You need to set up password authorization for dl.cgi only.

[alfiere]

Hi PilgrimX182,
thanks for the answer, but I'm encountering some strange behaviors.


If I set a password on upload_status.cgi
<LocationMatch "/cgi-bin/upload_status.cgi">
when the password is asked, if you click on 'Cancel' the file will be upload.

If I set a password upload.cgi
<LocationMatch "/cgi-bin/upload.cgi">
For the first time/session, I don't have back the script progress bar. The password request has delayed a lot and I receive directly the 'download URL'.

Still need an help

Thanks,
Alf

[PilgrimX182]

That is all correct
Apache won't return anything to browser till full upload stream finished pushing to server. That's why delay happens.
Seems you need to secure upload form page.

[alfiere]

No way, if I protect upload_form.html nothing happens.

But If I directly call the url: http://site.com/cgi-bin/Templates/upload_form.html I'm asked for the passwd.





Alf