Password protect dev site on shared server?

[caboosemoose]

I'm developing a new website (based on WordPress) and would like to put the whole thing behind a login. It's on a shared server, so don't think I have the .htaccess option, as it requires a reboot, I think.

I've read around and seen there are ways of password protecting in Wordpress, but I think this will still allow anyone to see parts of the site, like the header / logo, etc.

Any ideas? Thanks.

 

[Whatsisname]

It does not require a reboot, .htaccess files take effect immediately:

http://httpd.apache.org/docs/2.2/configuring.html#htaccess

 

[ripken204]

you could use something like this
http://wordpress.org/extend/plugins/underconstruction/

 

[CEpeep]

you could use something like this
http://wordpress.org/extend/plugins/underconstruction/

Still won't prevent someone who knows the URL from accessing the files. .htaccess is the best method for the type of protection the OP seems to want.

 

[jlocohustler]

You can use .htaccess and .thesecretfileyoucancreatetoprevent (well any file) to prevent access to the web directory, that is, everytime someone tries to access the website, they will be asked for a username and password. It is available on all types of servers that run Apache >2.

Basically:
Craete a .htaccess file with the following in it:

AuthUserFile /home/username/webdir/.asecretfile
AuthName "A useful message that will be display on the popup window."
AuthType Basic

require valid-user

Now create the .secret file with the following in it:

username:encryptedpassword

But the thing is, the password needs to be encrypted for this to work. I found this site that has an encrypted password generator. Use it and setup the password in the file.

 

[Whatsisname]

you could also just use htpasswd, which should be on the server already, to create the file.

 

[Red Squirrel]

Yeah HTTP authentication as suggested above is what I was about to post. The htpasswd utility will create the password file which you specify in the .htaccess. .htaccess is also instant, provided "allowoverride yes" exists for your directory. Should be the case with most web hosts.

 

[caboosemoose]

Thanks guys, I'll give it a whirl.