password protected pages and sections

  • Unknown's avatar

    If I am going to have a section of many pages that I want to be password protected for the time being, can I do that just by using a password for the top page of that section or must each page in the section require a password—or do those pages inherit the protection from the top page?

    On my site, it is the section called The Letters that uses the password, and then it links to subsections. I’m not going to create a site map, but I wonder if there is a trick by which others could find those pages.

    Thanks. Let me know if this is confusing.

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar

    I suspect the child pages would not be protected, though I might be wrong. If not protected, then trickery would not be required to reach them. Just knowing the title of a child page might be enough, though you could foil that by having title and slug being mismatched.

    You can easily test whether protection is in place for child pages. Log out, and enter the URL of a child page or sub-page. It will merely be the URL of your “The Letters” page, with an extension. If it goes directly to the page, then that page is not protected. If it goes to a password protected page, then it is protected.

  • Unknown's avatar

    You’re right, they are not protected, although it seems that if I use the same password for all of them, I only need to provide it once per visit to view all the protected pages, not for each page I try to visit. I hadn’t thought it would work that way, that giving the password once would open them all to the viewer, but that seems to be a good solution.

    Thanks.

  • Unknown's avatar
  • Unknown's avatar

    You’re right, they are not protected…

    I’m not sure what you mean by this. Did you confirm that, as I suspected, a visitor could, without the password, reach a child page if the title is known, and the title is the same as the slug?

  • Unknown's avatar

    You’re right, they are not protected…

    They do not inherit the protection from another page nor prevent visitors who know the page name

  • Unknown's avatar

    Thanks for confirming that. So you have to add protection to each page, parent and child, individually. However, if you use the same password for each related page, then that one password entered to open the parent page will also provide access to all of the children of that parent, and grandchildren. Is that correct?

  • Unknown's avatar
  • The topic ‘password protected pages and sections’ is closed to new replies.