Shield

Component ID

1335934

Component name

Shield

Component type

module

Maintenance status

Development status

Component security advisory coverage

covered

Downloads

2077943

Component created

Component changed

Component body

Summary

PHP Authentication shield. It creates a simple shield for the site with Apache authentication. It hides the sites, if the user does not know a simple username/password. It handles Drupal as a "walled garden".
This module helps you to protect your (dev) site with HTTP authentication.

Configuration

If you don't need the authentication just leave the user field blank.

  1. enable the module
  2. go to the admin interface (admin/config/system/shield) and fill the form
  3. nothing else :)

On plain old CGI

Since Drupal 7.23 you don't need any .htaccess modification for CGI (#670454: Support HTTP Authorization in CGI environment) but if you use plain old CGI you still need a modification:
Modify .htaccess, inside <IfModule mod_rewrite.c>. Add the following line at the beginning of the section:

  RewriteRule .* - [E=REMOTE_USER:%{HTTP:Authorization}]

Other

The original idea of the project came from chx. He also added tips for improvements. I'd like to thank the help and ideas of boombatower.

2012-04-26: Announcement: kalman.hosszu became a co-mainter of the module. He merges the features of his HTPasswd protection module into the Shield. Thank you very much Kálmán!

The 8.x branch is maintained by chx. We are looking for maintainers for 7.x.

Note: If you want to use it only on a dev site, and not in the production site, I suggest you to consider using the Environment modules and reading issue #1394326.