Questions tagged [access-control]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
58 views

Use Cloudflare WAF to block all URLs except home page and one subdirectory

I want to block all paths except /English/ and the home page www.example.com in Cloudflare WAF. If I allow the English category, I would expect access to be allowed to all URLs from this category. The ...
Helo Plus's user avatar
1 vote
2 answers
52 views

How to protect data on a website from indexing and inclusion to machine learning or LLMs training data?

I'm supporting a larger web database that contains many hundreds of articles with consumer grade and technical tests of hardware and electronics. Our policy has always been to provide open access to ...
prvok77's user avatar
  • 11
1 vote
1 answer
77 views

When uploading a photo to a website, for custom gifts and the like, do they only access the uploaded photo? [closed]

When uploading a photo to a website for a custom gift that the photo goes on, the phone or computer brings up a window to choose the photo you want. Does the website see any of the photos while you ...
AndroidUser558's user avatar
2 votes
0 answers
319 views

Allowing POST requests to bypass Basic Auth if on given pages

Current Implementation: SetEnvIfNoCase Host ^example\.com$ passreq AuthType Basic AuthName "Restricted Area" AuthUserFile /html/.htpasswd Order Deny,Allow Deny from all Satisfy any Require ...
Elwin's user avatar
  • 21
1 vote
1 answer
1k views

Configure nginx to set the content type from the URL only when there is an allowed user

I implemented a location configuration like this (legituser is set by a map lookup): location / { if ($legituser = 0) { return 200 "you are not allowed to access this url, please do bla bla ...
Marged's user avatar
  • 143
1 vote
1 answer
91 views

Requests from a specific older version of Firefox distributed across many Google and Cloudflare IP addresses

I've been getting thousands of requests each day from a specific user agent, Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Firefox/38.0. They're all from different IP addresses ...
Donovan_DMC's user avatar
2 votes
2 answers
489 views

How to block access to all but homepage unless that access comes from the homepage?

Given a homepage at domain.com (e.g., https://example.com/), I want: outside requests to only be able to visit the homepage and no subpages that homepage to successfully redirect visitors to a ...
mix's user avatar
  • 195
1 vote
0 answers
31 views

Our website is flagged as Suspicious Content by Vodafone and antimalware systems

We've faced issue caused by marking our website as suspicious by Forcepoint and CleanMX. It caused us another problem. Vodafone has stopped letting users to our site. Before, we had problems with ...
dan-maximov's user avatar
1 vote
0 answers
153 views

Is there a user and access control library for MERN stack? [closed]

I am currently learning the MERN stack, having previously worked mostly in Django. However, I find myself recoding the same things over and over again manually and not being entirely satisfied with ...
ZEE's user avatar
  • 11
4 votes
0 answers
58 views

NGINX configuration for the same folder protection rewrites in each of thousands of subdirectories

The following code allows me to protect a specific folder with the membership software we're using. The problem is if we have 1,000 folders we need to protect, we need to copy/paste this same code for ...
Jennifer W's user avatar
7 votes
1 answer
10k views

Deny access to all PHP files using FilesMatch, but make an exception for one file

Currently, using htaccess I am denying access to any PHP file in a directory, but not the JS, PNG, CSS files in the same directory. <FilesMatch "\.php$"> Order deny,allow Deny from all </...
posfan12's user avatar
  • 696
2 votes
0 answers
20 views

Allowing access to protected area for multiple users from one organisation

I have a website which has a password protected area of content. This content can by accessed by a number of employees of a subscribing company. For example, The Acme Widget Co. has 100 employees, ...
user1353459's user avatar
1 vote
0 answers
336 views

Restrict anonymous access to a Mediawiki site while putting a few pages on a white list of publicly accessible pages?

I have set up a Mediawiki using Bitnami through AWS, I have used the following in an attempt to restrict access unless a user logs in to the wiki. # Disable reading by anonymous users $...
Sebastian's user avatar
1 vote
1 answer
1k views

How to limit requests to certain domain in nginx?

I have a domain like sub.example.com. I'd like to allow GET access to certain paths uploads only through example.com Something like this: location ~ ^/uploads { allow example.com; ...
supermario's user avatar
1 vote
0 answers
1k views

Apache FilesMatch to deny access to all ".config" files is working except for web.config

In my apache server I don't want to serve any files with extensions .config because it could contain potentially sensitive information. In my apache2.conf file I added: <FilesMatch "\.config"> ...
Ulf Honkanen's user avatar
1 vote
0 answers
22 views

Allow our own systems to use an API and restrict it from the general internet without using authentication

I have an Apache server which is reverse proxy'd to some Java container. In Java container there is an API that we don't want internet to see but expect our own systems to use it without any ...
Sachin Verma's user avatar
3 votes
2 answers
12k views

How do I give a hired developer access to my bluehost cpanel?

I can't find any way to like "create a guest account" to access my account without just giving him my account credentials. How should this be done? I can't find any help articles on it.
temporary_user_name's user avatar
3 votes
1 answer
3k views

How to restrict web site/intranet access to company network?

What is the best/most secure way to create a web site or intranet on an externally hosted server, but make it only accessible from within my company's network? I am trying to avoid running my own ...
Jason's user avatar
  • 39
3 votes
1 answer
517 views

Does requiring login to access content hinder SEO?

I am wondering what the SEO effects of a 'Login Wall' is. More specifically, we have content that is region specific, so for instance a URL could look like www.example.com/content/Canada/Ontario. This ...
connected_user's user avatar
1 vote
1 answer
351 views

Limit Sitemap Access to Search Engines

I have a sitemap file which generates the sitemap in real time and lists every page on the site. Eventually the site will have tens of thousands of pages so generating the sitemap will take a fair bit ...
Chris Rutherfurd's user avatar
1 vote
2 answers
524 views

How does robots.txt work with sites in subfolders?

I have a single web host with a number of other parked domains/sites in sub-directories, like this: example.com is the primary site and root directory of the web hosting. example.com/www.example2....
Coomie's user avatar
  • 215
1 vote
1 answer
23 views

Good Faith contract solidified by joint-dual access to server directory

Our freelance marketing team needs earn a portion of every online sale. They will receive notification via email upon each sale. The trust in the system needs be instilled by a secure and permission ...
Eric Barrett's user avatar
1 vote
1 answer
726 views

Is there anything unusual or nefarious about private IP addresses in server logs?

A site I help take care of has just started getting crawled by somebody from 172.31.13.241 and 172.31.42.227 . According to WHOIS info, these are part of a block reserved by IANA for special purposes, ...
Emanuil Tolev's user avatar
1 vote
1 answer
2k views

Why does my IIS virtual directory serve folders but not files?

I have a network share (say, \\mysite\myshare) being served by an IIS 7.5 virtual directory at (say) http://www.example.com/myshare. From a web browser, I can click & navigate every folder and ...
DanB's user avatar
  • 111
0 votes
3 answers
174 views

Does uploading index.php protect the other files that would normally be visible in that directory?

PHP is a mystery for me. In the FTP main directory of my website, I uploaded 2 files: a.txt and b.txt. If I enter my website address in my browser I can view both a.txt and b.txt. However when I ...
user avatar