'Secure' area on basic website

[crc-ict]

I have had a request from our Chair of Governors to set up a secure area on the school website where information for the Governing Body can be posted.

 

I am currently researching this project and am seeking suggestions of what we can achieve within the realms of our basic LEA hosting, bearing in mind that we have simple access for PHP and ASP scripting (on request) but no access to a database server.

 

Ideally, we would like to have an authenticated username and password for each governor, but in the absence of being able to do this, a single password to access the area would suffice.

 

If anyone has any suggestions for this, I'd be really grateful to hear them!

 

Thanks,

 

Chris

[webman]

Is it Apache and are you allowed to use .htaccess and .htpasswd?

[alan-d]

Is it Apache and are you allowed to use .htaccess and .htpasswd?

 

Beat me to it

[StewartKnight]

I've done it on my school website, and it's very easy!

this may help!

[crc-ict]

No luck with .htaccess unfortunately - it looked like exactly what we wanted, but it doesn't work. I guess the server doesn't support it.

 

It is a server provided by the LEA so I don't know what type of server it is, nor do I have any sort of access to it other than a standard FTP connection to our area of it.

 

Looks like it's going to have to be one of those unpleasant JavaScript type jobs on the page itself

[NetworkGeezer]

By secure are do you mean SSL or just clear text password 'protection'?

[webman]

Using Javascript is very insecure, all people have to do is disable it in the browser. Atleast use something server side - here's a basic PHP example.

[Geoff]

It is a server provided by the LEA so I don't know what type of server it is

 

If you post the url, I can find out.

[crc-ict]

@Geoff: You have PM

 

@NetworkGeezer: I think SSL is probably over kill really, but it needs some protection. There would be meeting minutes, agendas, contact details etc. on there. So we're not talking National Security, but it needs a bit of protection.

 

@webman: I know what you mean about JavaScript, but it seems we can't do much with the servers

 

Cheers guys,

 

Chris

[apeo]

Could you not just contact your LEA and ask em for the facility?

[Geoff]

You have PM

Win2k, IIS 5.0.

 

Yuk.

[PaulBM]

I have to agree with Geoff. Yuk. Or as our students say all the time... 'That's so gay!'

 

Looks like you'll need to talk to the server operators, good luck with that.

[NetworkGeezer]

That's if Geoff hasn't already rooted it and installed LAMP

[webman]

That's if Geoff hasn't already rooted it and installed LAMP

 

It wouldn't surprise me if an IIS security 'feature' allowed that 8)

[crc-ict]

Thanks for all your help, guys.

 

I've had to give in and contact the LEA/ISP support people and they have something in hand they can do for us. Not as simple as I'd have liked, but there we go!

 

Sadly, it's all got to be done through them without much control from this end, but it's not negotiable.

 

Cheers,

Chris.

[SimpleSi]

You could simply set up a CMSimple site in a subfolder of your main site - it has a logon password and just requires PHP facilities on your server.

 

regards

 

Simon

[Scotmk]

If you are open to a small bit of MySQL creation you can use this.

 

PHP Login Script

 

This works very well and you can setup difference user / password logins.