Pages

Admin Pages Perfect World

Protecting Your Admin Pages

I've been planning to post this for some time but haven't had the opportunity until now. I thought I would post a little guide so people that are running live servers on a dedicated server can protect their admin pages. For example iWeb and pwAdmin.
First of all you need to know which web server your admin pages are on and second you will need to know the IP address of your home and not the network address for those using routers. To find out your IP address go to google and type in "what is my ip".

-----------------------------------------------------------------------------

For Apache web server you will need to do the following

Go to the directory of your admin pages. For example opt/lampp/htdocs/iweb

Next create a file called .htaccess and then open it and add the following:
order deny,allow
deny from all
allow from 127.0.0.1

Change the IP address to that of your home computer.

-----------------------------------------------------------------------------

For Tomcat java web server you will need to do the following:

Go to [Tomcat]\conf\context.xml [Tomcat] being the location of where you installed it, for example in 343s release tomcat is located @ opt/apache-tomcat-5.5.28/

Next open the file context.xml and find this line:
<WatchedResource>WEB-INF/web.xml</WatchedResource>

Directly after this line paste this code:
<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="127.0.0.1"/>

Change the IP address to your home computers address, save the file and restart your tomcat server. That's it!

Hope this helps a few newbies out

DaMadBoy
Ragezone