how do i redirect surfers from the auth fail page...
 

to a different page on my site?

here is the problem. pass hackers list my passes, and my scripts deleted the passes. but instead of showing these freeloaders that bland auth fail page i'd like to redirect them to more a more productive page like my tgp or something. the .htaccess file for the members area has this on it...

AuthName "Members Only"
AuthType Basic
AuthUserFile /usr/local/apache/www/wouldntyouliketoknow.com/cgi-bin/pass/.htpasswd
require valid-user

...and i'd like to add to it to redirect to another page.


anyone know the solution?

Are you trying to redirect 403 errors, or usernames? I have an .htaccess that will redirect usernames to a specific page.

i want to redirect all failed login attempts, you know how the pass prompt stays up for three tries in a row before it shows the failed auth page... well after that third try i wanna redirect that surfer's ass somewhere else!

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthType Basic
ErrorDocument 401 /401.html

<Limit GET>
order allow,deny
allow from all
</Limit>

Put that .htaccess file in your root directory.
Then make a page called 401.html, put that in the same directory and edit the HTML to send them to where you want.

i tried that. must have done something worng but it aint work.

i put this...

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthType Basic
ErrorDocument 401 /401.html

on a .htaccess file, stuck it right inside my members directory, with a page named 401.html, and when i loaded the member section url into the browser it opened right up, THEN the pass prompt came and after three purposely botched attempts it went away and left my members index page wide open...

Don't put it in your members directory. Put it one step up. And have your 401.html page one step up too, in the same directory as your .htaccess file. You can have an .htaccess file in your members directory and one in your root directory too.

that sounds good... but it isn't working

Have also to change your config file:

AllowOverride All

instead of just :

AllowOverride AuthConfig


This will make that all htaccess will be considered in the operation of the server, not just the Authorisation of members.

Otherwise, all what pOOp posted is right on.

gonna give that a shot...

thanx both of you