Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: domain of jslive@gmail.com designates
 64.233.162.201 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=iceIQAbPn/Vrfcypa2GKnE1Cn61PD7+Zs636F/Mgj6PTBjxRAxIUQOt5MKHqNuiUWUURPmky2o/OcTUtt8FsIwU9RccNeWZmthI6RVty4vWCr/CytV0FtKHeiIWSVWuxgzT+FHCNeiHkAVgj1DwFgT1NTNJl/X47gxiRFZ9nNE4=
Message-ID: <e498c1660601280827y4426eb90u9c4e4434aa7336b8@mail.gmail.com>
Date: Sat, 28 Jan 2006 11:27:12 -0500
From: Joshua Slive <joshua@slive.ca>
Sender: jslive@gmail.com
To: users@httpd.apache.org
In-Reply-To: <71324230601272035t33d13763y1a3b6bae9d78fe65@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <71324230601272035t33d13763y1a3b6bae9d78fe65@mail.gmail.com>
Subject: Re: [users@httpd] htaccess with mod_auth_mysql

On 1/27/06, Daniel Silva <danielnsilva@gmail.com> wrote:
> Hi,
>
> I have a .htaccess file in a direcory of my web server, that contains:
> -------------------------------------------------------------------------=
------------------
> AuthName "Conteudo exclusivo"
> AuthType Basic
>
> AuthMySQLUser usuario
> AuthMySQLPassword senha
> AuthMySQLDB banco
> AuthMySQLUserTable tabela
> AuthMySQLNameField usuario
> AuthMySQLPasswordField senha
>
> require valid-user
>
> ErrorDocument 401 /solicitar_acesso.php
> -------------------------------------------------------------------------=
------------------
>
> The question is: when i try to access a file in the protected
> directory, cancelling the authentication, the file
> "solicitar_acesso.php" is loaded, but on load, trying to open CSS
> files e images of the page, the authentication is required again, and
> if don=B4t make it the files don=B4t open. The file "solicitar_acesso.php=
"
> and others files aren=B4t in the protected directory.

When apache servers the errordocument, it doesn't tell the browser the
location that it is serving from, so the browser still sees the URL as
being the originally requested (authenticated) url.  Hence all
relative URLs in the errordocument will be interpreted relative to the
authenticated document.

The fix is to use only absolute URLs (starting in http:// or at least
/) in the errordocument.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org