Question

I’ve got a multi domain site (custom CMS) where all sites have the same documentroot. Depending on the url(domain) it will serve a different site. Having only 1 root they also have only 1 .htaccess

Now I want to protect 1 domain with a simple .htacess login (like this)

How do I specify this login to 1 domain?

Answer 1

You can use mod_setenvif support to protect only one of your domain. Here is the code that you need to put in your common .htaccess under $DOCUMENT_ROOT:

SetEnvIfNoCase Host ^www\.subdomain\.com$ SECURED=yes

AuthType Basic
AuthName "My Protected Area"
AuthUserFile /your/path/to/passwords
Require valid-user
Satisfy         any
Order           allow,deny
Allow from      all
Deny from       env=SECURED

Above code will show basic auth popup only for www.subdomain.com while leaving other domains open.