This simple HTML document helps you protecting static pages or whole websites with no server configuration required: you can now use Dropbox, Amazon S3 or any generic hosting service to host a private, password protected site.
This small project is a byproduct of my Tumbless blogging platform project.
- Upload the
index.htmldocument and the background image to your static hosting service. - Load it up in your browser, enter the password of your choice
- It will show "wrong password", never mind. Copy the section of the URL after the # sign.
- Create a folder with that name next to the
index.htmlfile - Upload the content that you want to protect inside the folder
The final structure will be:
- index.html
- background.jpg
- this-is-a-hash <-- the SHA1 hash of your password
\ - index.html <-- your original index document
Pretty much secure, please consider that:
- If your hosting service offers directory listing, a visitor can bypass the protection.
- there's no protection against brute force attack. Pick a very long and hard to guess password.
- The password's hash is part of the URI. Enforce HTTPS to avoid man in the middle attacks.
- Test the demo page in your browser with password 'secret'
- Deploy the whole repo on your hosting, and test again.