HTAccess File - configuration file for authentication


HTAccess file is ordinary ASCII text file that contains WhizBase variables WB_AuthType, WB_RealmWB_Scramble and WB_LoginPage and username/password pairs, organized by following structure:

[Authentication]
WB_AuthType=type (valid settings B-Basic, C-Cookie)
WB_LoginFile=filename (ignored if WB_AuthType=B)
WB_Realm=Realm

[AuthUsers]
username=password
username1=password1
...
usernameN=passwordN

For security reasons we strongly recommend to use wbsp extension for HTAccess file and to add WB_Command=R and <!--WB_BeginTemplate--> in it.
e.g.
[FormFields]
WB_Command=R
[Authentication]
WB_HTAccess=C
WB_LoginFile=/login.htm
[AuthUsers]
username=password
username1=password1
<!--WB_BeginTemplate-->
<html><body>
You can not read content of this file!
</body></html>


You can also use aut extension and set the server to handle  files with that extension by WBSP and do not change HiddeDocuments SSC variable, or you can place HTAccess file above wwwroot directory and use absolute path. For this you have to change AbsolutePath SSC variable.