Simple password protection aid</a> </head> <body> <H1 align=center>Simple password protection aid</H1> <? # # simplepass.php # # This script can create password protection, add new user, change password # for the directory it's placed. # It's a very simple password protection manager. # Currently you have to edit password file, manually, to remove a user. # $user = get_current_user(); $home = '/www/' .substr($user,0,1)."/$user"; ######## Password file name ####### # Use something other than .htpassword # Filename starting with . is a hidden file. $passfile = "$home/.standard"; # Password file name. function passwordform (){ echo <<<ENDECHO <ul><font size=+1><pre> Please enter username and password in the form below. Do not use the same username/password combo as the OPS or FTP. This type of password protection isn't very strong. If you are sure that you have fixed IP (range) and you usually connect from there, use IP protection + password protection. Otherwise, use "Password protection only". (Remove last digits after the dots for IP "RANGE" protection) IP (range) protection is valid only for initial setup. This script will add a new user, if used repeatedly in a directory already protected, and replace the password if you enter the same username already in place. To remove a user, edit passwordfile, manually. The default name of the password file is ".standard" in the top of your directory. </pre> <center> <form action="" method=POST><table> <tr><td>Username: </td> <td><input type=text name=uname value="${_POST['uname']}"></td></tr> <tr><td>Password: </td> <td><input type=password name=upass value=""></td></tr> <tr><td>Reconfirm Password: </td> <td><input type=password name=upass2 value=""></td></tr> <tr><td colspan=2 align=right> <input type=text name=uip value="${_SERVER['REMOTE_ADDR']}"> <input type=submit name=submit value="IP (range) protectionm + password protection"></td></tr> <tr><td colspan=2 align=right> If you don't have fixed IP ==> <input type=submit name=submmit value="Password protection only"></td></tr> </table> </center></font></ul> ENDECHO; exit; } # function passwordform if(isset($_POST['uname'])){ $upass = stripslashes($_POST['upass']); $uname = stripslashes($_POST['uname']); /* echo <<<ENDPASS <pre> username:$uname password:$upass password2:${_POST['upass2']} ip:${_POST['uip']} submit:${_POST['submit']} ENDPASS; */ if( $uname == ''){ echo "<h2>You must enter the username</h2>"; passwordform(); } if( $upass == ''){ echo "<h2>You must enter the password</h2>"; passwordform(); } if( $_POST['upass'] != $_POST['upass2'] ){ echo "<h2>You must enter the same password twice to confirm</h2>"; passwordform(); } $seed = NULL; for ($i = 0; $i < 8; $i++) { $seed .= substr('0123456789abcdef', rand(0,15), 1); } $encoded_string = crypt($upass, "$1$".$seed); $passdata = $uname.":".$encoded_string; if( file_exists(".htaccess")) { $hta = file_get_contents(".htaccess"); } if( preg_match("/^AuthUserFile +(.*)$/im", $hta, $matches) ){ $passfile = $matches[1]; #echo "passfile=$passfile###"; $hta = preg_replace('/^(require user.*)$/im', "require valid-user", $hta); $fh = fopen(".htaccess", 'w' ); fwrite($fh, $hta); fclose($fh); }else{ $authpart = "\n#### Automatically generated and added by ${_SERVER['PHP_SELF']} ###\n"; if(substr($_POST['submit'],0,2) =="IP"){ $authpart .= " order deny,allow deny from all allow from ${_POST['uip']} "; } $authpart .= <<<ENDAUTH AuthUserFile ${passfile} AuthGroupFile /dev/null AuthName "Authorization Required" AuthType Basic require valid-user ${satis} ENDAUTH; $authpart .= "\n### END ###\n"; $fh = fopen(".htaccess", 'a' ); fwrite($fh, $authpart); fclose($fh); } if( file_exists($passfile)) { $passf = file_get_contents($passfile); copy($passfile, "$passfile.bak"); } if( preg_match("/^$uname:/m", $passf) ){ $passf = preg_replace("/^$uname:.*?\n/m", '', $passf); $fh = fopen($passfile, 'w' ); fwrite($fh, $passdata."\n".$passf); fclose($fh); }else{ $fh = fopen($passfile, 'a'); fwrite($fh, $passdata."\n"); fclose($fh); } echo "<h2 align=center>Password protection, done ! </h2>"; passwordform(); exit; }else{ passwordform(); } ?>