ESP8266 Community Forum

- Sat May 14, 2016 8:36 am #47439 Since the ESP8266HTTPUpdateServer is using the ESP8266WebServer, you could simply add some code in the /update callback to prevent the process to continue. This code is similar of the one from ESP8266WebServer/examples/HttpBasicAuth/HttpBasicAuth.ino :

Code: Select all    if(!server.authenticate(www_username, www_password))
      return server.requestAuthentication();


- Sat May 14, 2016 12:49 pm #47443 I think then you could probably turn on the MD5 signed option, so that only signed codes are accepted to be uploaded. One would hope that you are only talking about people who do not know the system, and thus wouldn't know the signing code.