If when some one logs in you change the .htpasswd file to require an unknown (to the users) username:password combination, that should prevent users from accessing html pages in the .htaccess folder. Then when that person logs out the .htpasswd file is returned to a known username:password.
This might work in some limited sense.
But you'll have to seriously address PWS's question: "What do you intend to do if someone leaves without logging out?"
Claude
In reply to Re: Security issues
by Xxaxx
in thread Security issues
by Stamp_Guy
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |