What are some alternative methods to password protect a directory on a web server without using .htaccess?

One alternative method to password protect a directory on a web server without using .htaccess is to create a PHP script that checks for a valid username and password before allowing access to the directory. This script can be included at the top of each page in the directory to ensure that only authenticated users can view the content. 

```php
<?php
$valid_username = 'admin';
$valid_password = 'password';

if (!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW']) || 
    $_SERVER['PHP_AUTH_USER'] != $valid_username || $_SERVER['PHP_AUTH_PW'] != $valid_password) {
    header('WWW-Authenticate: Basic realm="Restricted Area"');
    header('HTTP/1.0 401 Unauthorized');
    echo 'Access Denied';
    exit;
}
?>
```

This PHP code snippet checks if the provided username and password match the predefined credentials. If not, it sends a 401 Unauthorized header and prompts the user for authentication. This script can be included in all files within the directory that needs to be protected.

Keywords

PHP authentication directory protection server-side password encryption

Related Questions