FdeCourt wrote:
> Hi,
>
> I want to secure on directory of my site so I am using an htaccess
> file.
> When I connect to this part of the website, it ask me the login and
> password, but, if I close the browser, and try again, I can go without
> restriction. Is there any way to ask for the password each time the
> browser session is reopen.
> How does this solution works ? If on person behind the proxy is
> connected, does an other person, behind the same proxy will have to
> enter the login/password too (I will have only one username, used by
> several users) ?
>
> After this htaccess restriction I also have a more standard
> login/password connection per users, but to aviod the maximum of risks,
> I also need a one username/password restriction before the second one.
>
> Thanks for your help

what kind of .htaccess authentication are you using?
are you sure you are actually closing the browser, try using a
different browser to authenticate - does it let you in.

if you are using firefox or another tabbed browser you have to close to
entire browser, and dont forget to close all of the sub windows like
"downloads" "addons" and others, if you use the minimise to tray (if on
windows) are you certain the process is actually gone.

after all if it asks you once, it should ask you each time since the
server has to be told each time by the browser,
my guess is that the browser wasnt completely closed.