Security question: .htaaccess

User 1946475 Photo


Registered User
4 posts

I am using the current Coffeecup HTML editor (build 305). I have a domain that I recently add a location for
accessing a FTP location on the web site. I notice that when I type in the ULR and I get the (Firefox) user name and password window popup.
The problem: The first time I enter the user/password I get the same pop up window the second time. After the second
Entry of user name/password, I reach the folder I want to get to. Actually, after I am logged in (the second time), everything works as expected. What happens to the first?
I am concerned that this represents a security issue, perhaps a key logging problem. In that case, I don’t know if someone/something is capturing my user name and login(?).
Is there any way that I can test this? I do frequently run a virus/malware scan.
BTW, the web site was created prior to using Coffeecup as a HTML editor. The host is a server running LINUX and I think Apache software.
It has not created a problem so far as the access only allows file9s) to be downloaded and no FTP uploading.

I am hoping someone can shine a light on this issue.

Thanks in advance.
User 3004957 Photo


Registered User
848 posts

Hi Jerry

I'm not sure I got this the right way around. You are saying that while using the FTP function within the HTML editor, a Firefox dialogue box shows up asking to remember the username and password? That doesn't make any sense, which is why I must have the wrong end of the stick.

Do you have any other password storage software installed, or perhaps a password storage extension for Firefox? It seems very odd you get prompted to remember this username/password by Firefox when using FTP within the editor.

Dave.
User 355448 Photo


Ambassador
3,144 posts

Jerry,

It sounds like you may have used the Website Access Manager to set a password in more than one folder, or maybe set security on your site using the control panel provided by your host.

Are you using htaccess for anything other than passwords?

Are you using Website Access Manager?

If you are using WAM, just use it to remove the security and you can start again.

If you are not using WAM and have not other use for htaccess, you can delete the htaccess and htpasswd files.

If you use htaccess for redirects or keeping spammers out, you can just edit the htaccess files.

If we don't understand what you are trying to explain, please try again and maybe we will get an understanding of what you are seeing.

Have something to add? We’d love to hear it!
You must have an account to participate. Please Sign In Here, then join the conversation.