directory-beveiligen
-- _begin.php -----------------
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
<html>
<head>
<title>Password program</title>
</head>
<body>
<table width="700" cellpadding="0" cellspacing="0" border="0">
<tr>
<td height="1999" valign="top"> </td>
<td></td>
<td valign="top"><table width="635" border="0" cellpadding="0" cellspacing="0">
<tr>
<td><strong>Password program</strong> </a><br></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
<tr>
<td><form action="password.php" method="post" enctype="application/x-www-form-urlencoded" name="form1">
<table width="500" border="0">
<tr>
<td width="190"><strong>Username</strong></td>
<td width="300"><input name="username" type="text" id="username" size="50"></td>
</tr>
<tr>
<td><strong>Password</strong></td>
<td><input name="yourpw" type="password" id="yourpw" size="15"></td>
</tr>
<tr>
<td><strong>Retype password </strong></td>
<td><input name="checkpw" type="password" id="checkpw" size="15"></td>
</tr>
<tr>
<td> </td>
<td><input type="submit" name="Submit" value="Submit">
<input type="reset" name="Reset" value="Reset"></td>
</tr>
</table>
</form>
</td>
</tr>
<tr>
<td><p ></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
</table></td>
</tr>
</table>
</body>
</html>
<head>
<title>Password program</title>
</head>
<body>
<table width="700" cellpadding="0" cellspacing="0" border="0">
<tr>
<td height="1999" valign="top"> </td>
<td></td>
<td valign="top"><table width="635" border="0" cellpadding="0" cellspacing="0">
<tr>
<td><strong>Password program</strong> </a><br></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
<tr>
<td><form action="password.php" method="post" enctype="application/x-www-form-urlencoded" name="form1">
<table width="500" border="0">
<tr>
<td width="190"><strong>Username</strong></td>
<td width="300"><input name="username" type="text" id="username" size="50"></td>
</tr>
<tr>
<td><strong>Password</strong></td>
<td><input name="yourpw" type="password" id="yourpw" size="15"></td>
</tr>
<tr>
<td><strong>Retype password </strong></td>
<td><input name="checkpw" type="password" id="checkpw" size="15"></td>
</tr>
<tr>
<td> </td>
<td><input type="submit" name="Submit" value="Submit">
<input type="reset" name="Reset" value="Reset"></td>
</tr>
</table>
</form>
</td>
</tr>
<tr>
<td><p ></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
</table></td>
</tr>
</table>
</body>
</html>
----- einde : _begin.php -----------------------------
De informatie van het formulier _begin.php wordt in
password.php verwerkt. Tevens wordt gecontrolleerd of de
twee wachtwoorden $yourpw en $checkpw met elkaar overéén komen.
----- password.php -------------------------
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
<HTML><head>
<title>Create users and passwords</title>
<style type="text/css">
<!--
.style1 {color: #FFFFFF}
-->
</style>
</head>
<body>
<table width="700" cellpadding="0" cellspacing="0" border="0">
<tr>
<td height="1999" valign="top"><table width="200" cellpadding="0" cellspacing="0" border="0">
<tr>
<td align="left" valign="top" bgcolor="#006699"><p class="style1">Please wait until you received a message that everything is allright! </p>
</td>
</tr>
<tr>
<td></td>
</tr>
<tr>
<td bgcolor="#006699"></td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td><p> </p>
</td>
</tr>
</table></td>
<td></td>
<td valign="top"><table width="635" border="0" cellpadding="0" cellspacing="0">
<tr>
<td>Create Passwords and users</a><br></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
<tr>
<td><?
# Secured directory, a script written by
# Cynthia Fridsma.
#
# Works only on an appache environment in combination with
# a linux server.
function htpasswd($pass)
{
$pass = crypt(trim($pass),base64_encode(CRYPT_STD_DES));
return $pass;
}
# Get the information from the
# form, transmitted by _begin.php
$username = $_POST['username'];
$password = $_POST['yourpw'];
$check = $_POST['checkpw'];
// check if the password and check password are the same.
if ($check == $password):
// encode the password
$secret = htpasswd($password);
// write the password & user to into the password file
$secure = ".htpasswd";
$fd = fopen($secure, "a+") or die ("I'm sorry but I can't write to .htpassword");
$line = fwrite($fd, $username);
$space = fwrite($fd, ":");
$content = fwrite($fd, $secret);
$break = fwrite($fd, "\n");
fclose($fd);
echo ("Username and password are being written into .htaccess<br><br>");
echo ("<a href=" . chr(34) . "_begin.php" . chr(34) . ">Click here</a> to add a new user for the secured directory<br><br>");
echo ("<a href=" . chr(34) . "_initialize.php" . chr(34) . ">Click here</a> to seucre the directory now <br><h2>Use this function only once!</h2><br>");
endif;
if ($check != $password):
echo ("<br>I am sorry, but the passwords didn't match, please try again.<br><br>");
echo ("<a href=" . chr(34) . "_begin.php" . chr(34) . ">Try again </a>");
endif;
?>
</td>
</tr>
<tr>
<td><p ></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
</table></td>
</tr>
</table>
</body>
</html>
<title>Create users and passwords</title>
<style type="text/css">
<!--
.style1 {color: #FFFFFF}
-->
</style>
</head>
<body>
<table width="700" cellpadding="0" cellspacing="0" border="0">
<tr>
<td height="1999" valign="top"><table width="200" cellpadding="0" cellspacing="0" border="0">
<tr>
<td align="left" valign="top" bgcolor="#006699"><p class="style1">Please wait until you received a message that everything is allright! </p>
</td>
</tr>
<tr>
<td></td>
</tr>
<tr>
<td bgcolor="#006699"></td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td><p> </p>
</td>
</tr>
</table></td>
<td></td>
<td valign="top"><table width="635" border="0" cellpadding="0" cellspacing="0">
<tr>
<td>Create Passwords and users</a><br></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
<tr>
<td><?
# Secured directory, a script written by
# Cynthia Fridsma.
#
# Works only on an appache environment in combination with
# a linux server.
function htpasswd($pass)
{
$pass = crypt(trim($pass),base64_encode(CRYPT_STD_DES));
return $pass;
}
# Get the information from the
# form, transmitted by _begin.php
$username = $_POST['username'];
$password = $_POST['yourpw'];
$check = $_POST['checkpw'];
// check if the password and check password are the same.
if ($check == $password):
// encode the password
$secret = htpasswd($password);
// write the password & user to into the password file
$secure = ".htpasswd";
$fd = fopen($secure, "a+") or die ("I'm sorry but I can't write to .htpassword");
$line = fwrite($fd, $username);
$space = fwrite($fd, ":");
$content = fwrite($fd, $secret);
$break = fwrite($fd, "\n");
fclose($fd);
echo ("Username and password are being written into .htaccess<br><br>");
echo ("<a href=" . chr(34) . "_begin.php" . chr(34) . ">Click here</a> to add a new user for the secured directory<br><br>");
echo ("<a href=" . chr(34) . "_initialize.php" . chr(34) . ">Click here</a> to seucre the directory now <br><h2>Use this function only once!</h2><br>");
endif;
if ($check != $password):
echo ("<br>I am sorry, but the passwords didn't match, please try again.<br><br>");
echo ("<a href=" . chr(34) . "_begin.php" . chr(34) . ">Try again </a>");
endif;
?>
</td>
</tr>
<tr>
<td><p ></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
</table></td>
</tr>
</table>
</body>
</html>
---------- einde password.php ---------------
Tot slot het script _initialize.php, deze beveiligd de
directory
---- _initialize.php ----------------------------
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>Initialize</title>
<style type="text/css">
<!--
.style1 {color: #FFFFFF}
-->
</style>
</head>
<body>
<table width="700" cellpadding="0" cellspacing="0" border="0">
<tr>
<td height="1999" valign="top"><table width="200" cellpadding="0" cellspacing="0" border="0">
<tr>
<td bgcolor="#006699"><span class="style1">This procedure will secure your current directory and can't be undone! </span></td>
</tr>
<tr>
<td></td>
</tr>
<tr>
<td bgcolor="#006699"></td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td><p> </p>
</td>
</tr>
</table></td>
<td></td>
<td valign="top"><table width="635" border="0" cellpadding="0" cellspacing="0">
<tr>
<td>Secure the current directory</a><br></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
<tr>
<td>
<?php
# Secure the directory
# written by Cynthia Fridsma
// get the absolute directory
$hello = getcwd();
// this are the lines that will be written into
// .htaccess, used by Appache in a Linux environment
# $first = "AuthUserFile " . $hello . "/.htpasswd";
// If you have a windows environment than use this line instead :
$first = "AuthUserFile " . $hello . "\.htpasswd";
$second = "AuthName " . chr(34) . "Restricted Area Name" . chr(34);
$third = "AuthType Basic";
$last = "require valid-user";
echo ($first . "<br>");
echo ($second . "<br>");
echo ($third . "<br>");
echo ($last . "<br>");
$secure = ".htaccess";
// okay, now we will write the data into .htaccess
$fd = fopen($secure, "w") or die ("I'm sorry but I can't write to .htaccess");
$line = fwrite($fd, $first);
$space = fwrite($fd, "\n");
$content = fwrite($fd, $second);
$space = fwrite($fd, "\n");
$content = fwrite($fd, $third);
$space = fwrite($fd, "\n");
$content = fwrite($fd, $last);
fclose($fd);
echo ("<hr>Done ... the directory is now secured!<hr>");
?>
</td>
</tr>
<tr>
<td><p ></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
</table></td>
</tr>
</table>
</body>
</html>
<html>
<head>
<title>Initialize</title>
<style type="text/css">
<!--
.style1 {color: #FFFFFF}
-->
</style>
</head>
<body>
<table width="700" cellpadding="0" cellspacing="0" border="0">
<tr>
<td height="1999" valign="top"><table width="200" cellpadding="0" cellspacing="0" border="0">
<tr>
<td bgcolor="#006699"><span class="style1">This procedure will secure your current directory and can't be undone! </span></td>
</tr>
<tr>
<td></td>
</tr>
<tr>
<td bgcolor="#006699"></td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td><p> </p>
</td>
</tr>
</table></td>
<td></td>
<td valign="top"><table width="635" border="0" cellpadding="0" cellspacing="0">
<tr>
<td>Secure the current directory</a><br></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
<tr>
<td>
<?php
# Secure the directory
# written by Cynthia Fridsma
// get the absolute directory
$hello = getcwd();
// this are the lines that will be written into
// .htaccess, used by Appache in a Linux environment
# $first = "AuthUserFile " . $hello . "/.htpasswd";
// If you have a windows environment than use this line instead :
$first = "AuthUserFile " . $hello . "\.htpasswd";
$second = "AuthName " . chr(34) . "Restricted Area Name" . chr(34);
$third = "AuthType Basic";
$last = "require valid-user";
echo ($first . "<br>");
echo ($second . "<br>");
echo ($third . "<br>");
echo ($last . "<br>");
$secure = ".htaccess";
// okay, now we will write the data into .htaccess
$fd = fopen($secure, "w") or die ("I'm sorry but I can't write to .htaccess");
$line = fwrite($fd, $first);
$space = fwrite($fd, "\n");
$content = fwrite($fd, $second);
$space = fwrite($fd, "\n");
$content = fwrite($fd, $third);
$space = fwrite($fd, "\n");
$content = fwrite($fd, $last);
fclose($fd);
echo ("<hr>Done ... the directory is now secured!<hr>");
?>
</td>
</tr>
<tr>
<td><p ></td>
</tr>
<tr bgcolor="#006699">
<td></td>
</tr>
</table></td>
</tr>
</table>
</body>
</html>
---------- einde _initialize.php ------------------