.htaccess Tutorial

**lamar-wap** · 06.05.06, 18:16

so gumslone can u give more info and more stuffs it can use to do?

**abhisar** · 27.05.06, 06:32

Yes we want more!!

**subzero** · 01.06.06, 02:45

stop the hacker attmet here......

Code:

#!/usr/local/bin/perl
# htaccess password protector

########################################################################
#
########################################################################
#
# You need to modify $formloc, $basedir, $correctpass, $emailfrom
# Be sure to upload the script in ASCII mode
# The very first line of the script points to where perl is installed on your server
# 

  #
  # URL where the script is located
  #
  $formloc = "http://yoursite.com/htaccess/admin.cgi";

  # The base directory is the directory one level up from where you will be securing
  # the sub-directories.
  # if you want to secure /home/user/members then the base directory will be /home/user/
  #
  #
  # Physical drive path to the script
  # Don&#39;t forget the / at the end
  #
  $basedir = "/u/web/tech12/htaccess/";
  
  #  use [url]http://yoursite.com/crypt.cgi?password  for[/url] new one
  #  example [url]http://yoursite.com/crypt.cgi?camel[/url]
  #  Then copy and paste the encrypted results below ...
  #
  $correctpass = "aaqPiZY5xR5l.";  # password is test

  # no need to change .. but you can use any file name for storing passwords
  #
  # On some servers, you may need to upload a blank .htpasswd file into the directory
  # you are protecting and chmod it to 777
  #
  $htpasswdname = ".htpasswd";
  
  $scrollsize = 10;                    # how big the user list menu will be
  $mailprog = &#39;/usr/lib/sendmail&#39;;     # where sendmail is on your server

  # when e-mails are sent out, what will show in the From field
  # Don&#39;t forget the \ before the @ in the e-mail address
  #
  $emailfrom = "sammy\@yoursite.com (site name)"; 

  # Subject of the e-mails
  #
  $emailsubject = "Your Access Account";

  $emailtop = "Text to be placed at the top of the e-mail \n\n";
  $emailbottom = "\n\nText to be placed at the bottom of the e-mail \n\n";

  &parse_form;

  # only here for demo
  #$FORM{&#39;targetdir&#39;} = "secure";

  # strip funny characters off
  # this prevents you from typing in /directory/directory2 in the script
  # if you do want to be able to protect sub-sub directories then put a #
  # infront of each of the targetdir lines
  #
  $FORM{&#39;targetdir&#39;} =~ s/\\//g;
  $FORM{&#39;targetdir&#39;} =~ s/\///g;
  $FORM{&#39;targetdir&#39;} =~ s/\|//g;
  $FORM{&#39;targetdir&#39;} =~ s/\;//g;


  # do not change
  $htpasswdloc = "$basedir$FORM{&#39;targetdir&#39;}/$htpasswdname";

  print "Content-type: text/html\n\n";
  #
  # Check if only the admin can use
  #
  if (crypt($FORM{&#39;password&#39;},"aa") ne $correctpass) {
    &askforpass;
    exit;
  }

  print "<HTML><TITLE>Techno Trade&#39;s Password Editor</TITLE><BODY BGCOLOR=#FFFFFF>\n";


  if ($FORM{&#39;targetdir&#39;} eq "") {
    &refresh;
    exit;
  }
  &adduser if (($FORM{&#39;action&#39;} eq "ADD") && ($FORM{&#39;targetdir&#39;} ne ""));
  &deleteuser if (($FORM{&#39;action&#39;} eq "DELETE") && ($FORM{&#39;targetdir&#39;} ne ""));
  &generatehtaccess if (($FORM{&#39;action&#39;} eq "GEN") && ($FORM{&#39;targetdir&#39;} ne ""));
  &extractemails if (($FORM{&#39;action&#39;} eq "EMAILS") && ($FORM{&#39;targetdir&#39;} ne ""));

  &addinfo;

  &listusers;

  &print_end;

  exit;

#########################################
sub addinfo {

print<<ADDINFO;
  <FONT SIZE=5 COLOR=000080 FACE="VERDANA, ARIAL, HELVETICA">[b]Password editor[/b]</FONT>


  <FONT SIZE=4 COLOR=000080 FACE="VERDANA, ARIAL, HELVETICA">[b]Add User[/b]</FONT>
  <PRE><FORM METHOD=POST ACTION="$formloc">
  username  : <INPUT NAME="username" SIZE=20> password  : <INPUT TYPE=password SIZE=20 name="pass">
  name      : <INPUT SIZE=20 name="name"> email     : <INPUT SIZE=30 name="email">
  comments  : <INPUT SIZE=30 name="comments">
  <INPUT TYPE="CHECKBOX" NAME="sendemail" VALUE="Y">       : Check to e-mail new entry to user
  Extra E-mail Text : 
              <TEXTAREA NAME="extratext" COLS=50 ROWS=4></TEXTAREA>
  </PRE>
  <INPUT TYPE="hidden" NAME="password" VALUE="$FORM{&#39;password&#39;}">
  <INPUT TYPE="hidden" NAME="targetdir" VALUE="$FORM{&#39;targetdir&#39;}">
  
  <INPUT TYPE="submit" Value="Add User">
  <INPUT TYPE="hidden" NAME="action" VALUE="ADD">

  </FORM>
ADDINFO

}


####################################
#
# Print Footer Info
#
sub print_end {
 &refresh;
print<<RELO1;
 <HR noshade>
 <FONT SIZE=4 COLOR=000080 FACE="VERDANA, ARIAL, HELVETICA">
 [b]Generate .htaccess file[/b]</FONT>
 <FORM METHOD="POST" ACTION="$formloc">
 <PRE><INPUT TYPE="hidden" NAME="password" VALUE="$FORM{&#39;password&#39;}">
 Directory : <INPUT NAME="targetdir" VALUE="$FORM{&#39;targetdir&#39;}">
 </PRE>
 <INPUT TYPE="hidden" NAME="action" VALUE="GEN">
 <INPUT TYPE="submit" Value=" Generate ">
 </FORM>
 

 This will display what your .htaccess file should look like for the above directory

 Just copy and paste the results of this to a text editor, save the file as .htaccess and
 upload to the directory you wish to password protect. (Use your browser&#39;s back button to return) 
 <HR noshade>
 <FONT SIZE=4 COLOR=000080 FACE="VERDANA, ARIAL, HELVETICA">
 [b]Extract E-mails[/b]</FONT>
 <FORM METHOD="POST" ACTION="$formloc">
 <INPUT TYPE="hidden" NAME="password" VALUE="$FORM{&#39;password&#39;}">
 <INPUT TYPE=HIDDEN NAME="targetdir" VALUE="$FORM{&#39;targetdir&#39;}">

 <INPUT TYPE="hidden" NAME="action" VALUE="EMAILS">
 <INPUT TYPE=CHECKBOX NAME="comma" VALUE="Y"> Add a comma after each line ?

 <INPUT TYPE="submit" Value=" Extract E-mails ">


 This feature is used to pull all the e-mail address from your member list.
 You can then copy and paste the list to your favorite e-mail program.
 </FORM>
 



RELO1

  print "
<CENTER><A HREF=\"http://yoursite.com\">Techno Trade Online Solutions</A> \\\ <A HREF=\"http://yoursite.com/htaccess/\">Script Home</A>
\n";
  print "</CENTER>\n";
  print "</BODY></HTML>\n";
}

############
sub refresh {
 print<<REFRE1;
 <HR noshade>
 <FONT SIZE=4 COLOR=000080 FACE="VERDANA, ARIAL, HELVETICA">
 [b]Refresh Screen[/b]</FONT>

 Change to a directory which you want password protected
 
 <FORM METHOD="POST" ACTION="$formloc">
 <PRE><INPUT TYPE="hidden" NAME="password" VALUE="$FORM{&#39;password&#39;}">
 Directory : <INPUT NAME="targetdir" VALUE="$FORM{&#39;targetdir&#39;}">
 </PRE>
 <INPUT TYPE="submit" Value=" Refresh ">
 </FORM>
REFRE1
}

############
sub askforpass {
 print<<REFRE1;
 <HR noshade>
 <FONT SIZE=4 COLOR=000080 FACE="VERDANA, ARIAL, HELVETICA">
 [b]Enter your password/directory[/b]</FONT>

 <FORM METHOD="POST" ACTION="$formloc">
 <PRE>
 Password  : <INPUT NAME="password" SIZE=20>
 Directory : <INPUT NAME="targetdir" SIZE=30>
 </PRE>
 <INPUT TYPE="submit" Value=" Refresh ">
 </FORM>
REFRE1
}


#####################################
#
# Prints the bottom box showing path and .htaccess format
#
sub generatehtaccess {


  print "<PRE>";
  print "AuthName Protected-Directory\n";
  print "AuthType Basic\n";
  print "AuthUserFile $basedir$FORM{&#39;targetdir&#39;}/$htpasswdname\n";
  print "&lt;limit GET POST>\n";
  print "require valid-user\n";
  print "&lt;/limit>\n";
  print "</PRE>\n";  

  exit;
}

###########################################
#
#  List users
#
sub listusers {

  local($user,$counter,$x);
  if (!(-e $htpasswdloc)) {
    $counter = 0;
    return;
  }
 
  print "<HR noshade><FONT SIZE=4 COLOR=000080 FACE=\"VERDANA, ARIAL, HELVETICA\">[b]List Users[/b]</FONT>

\n";
  print "<FORM METHOD=\"POST\" ACTION=\"$formloc\">\n";

  open(FILE,$htpasswdloc);
  flock(FILE,2);
  @USERS = <FILE>;
  close(FILE);

  foreach $us (@USERS) {
    if (substr($us,0,1) ne "#") {
      ($user,$pass) = split (":",$us,2);
      push(@USERLIST,$user);
    } else {
      $commentline = substr($us,1);
      ($user,$name,$email,$comments,$extra) = split(/\s*\|\s*/,$commentline,5);
      $USERINFO{$user} = $commentline;
    }
  }

  #
  # Sort by username
  #
  @USERLIST = sort {$a cmp $b} @USERLIST;

  print "<SELECT NAME=\"username\" SIZE=$scrollsize>\n";

  foreach $user (@USERLIST) {
    print "<OPTION VALUE=\"$user\">$user";
    if ($USERINFO{$user}) {
       ($user,$name,$email,$comments,$extra) = split(/\s*\|\s*/,$USERINFO{$user},5);
       print " - $name - $email - $comments\n";
    }
  }
print<<LU1;
</SELECT>
<INPUT TYPE="hidden" NAME="action" VALUE="DELETE">
<INPUT TYPE="hidden" NAME="password" VALUE="$FORM{&#39;password&#39;}">
<INPUT TYPE="HIDDEN" NAME="targetdir" VALUE="$FORM{&#39;targetdir&#39;}">


<INPUT TYPE=\"submit\" Value=\"Delete User (Select one from list)\">



Or Select a User to modify password

New Password : <INPUT TYPE=PASSWORD NAME="newpass" SIZE=20>

<INPUT TYPE="CHECKBOX" NAME="sendemail" VALUE="Y">       : Check to e-mail modification to user


<INPUT NAME="modbutton" TYPE=\"submit\" Value=\"Modify Password">
</FORM>
LU1
}

###########################################
#
#  Extract E-mails
#
sub extractemails {

  local($user,$counter,$x);
  if (!(-e $htpasswdloc)) {
    $counter = 0;
    return;
  }
 
  open(FILE,$htpasswdloc);
  flock(FILE,2);
  @USERS = <FILE>;
  close(FILE);
  print "Extracting E-mails ... 

";
  foreach $us (@USERS) {
    if (substr($us,0,1) eq "#") {
      $commentline = substr($us,1);
      ($user,$name,$email,$comments,$extra) = split(/\s*\|\s*/,$commentline,5);
      if ($email =~ /\@/) {
         print "$email";
         print "," if ($FORM{&#39;comma&#39;} eq "Y");
         print "
\n";
      }
    }
  }
  exit;
}


###################################################
#
# Delete User
#
sub deleteuser {

  open(FILE,$htpasswdloc);
  flock(FILE,2);
  @USERS = <FILE>;
  close(FILE);

  open(FILE,">$htpasswdloc");
  flock(FILE,2);
  $counter = @USERS;
  for ($x=0; $x < $counter; $x++) {
    if (substr($USERS[$x],0,1) ne "#") {
      ($user,$pass) = split (":",$USERS[$x],2);
    } else {
      $commentline = substr($USERS[$x],1);
      $commentline =~ s/\n//g;
      ($user,$name,$email,$comments,$extra) = split(/\s*\|\s*/,$commentline,5);
      if ($FORM{&#39;username&#39;} eq $user) {
        $deluser = $user;
        $delname = $name;
        $delemail = $email;
        $delcomments = $comments;
        $delextra = $extra;
      }
    }
    print FILE "$USERS[$x]" if ($user ne $FORM{&#39;username&#39;});
  }

  if (($FORM{&#39;username&#39;} ne "") && ($FORM{&#39;modbutton&#39;} eq "Modify Password") && ($FORM{&#39;newpass&#39;} ne "")) {
    print FILE
    join (":", $deluser, crypt($FORM{&#39;newpass&#39;},"aa")), "\n";
    print FILE "#$deluser|$delname|$delemail|$delcomments|$extra\n";
    if (($FORM{&#39;sendemail&#39;} eq "Y") && ($delemail =~ /\@/)) {
       &send_email($delemail,$deluser,$FORM{&#39;newpass&#39;},"");
    }
  }
  close(FILE);

}

#################################################
#
# Add user to the file
#
sub adduser {

  $FORM{&#39;pass&#39;} =~ s/\n//g;
  $FORM{&#39;email&#39;} =~ s/\n//g;
  $FORM{&#39;name&#39;} =~ s/\n//g;
  $FORM{&#39;comments&#39;} =~ s/\n//g;
  $FORM{&#39;pass&#39;} =~ s/\|//g;
  $FORM{&#39;email&#39;} =~ s/\|//g;
  $FORM{&#39;name&#39;} =~ s/\|//g;
  $FORM{&#39;comments&#39;} =~ s/\|//g;

  
  &endscript("Username must be lowercase alphabetic + numeric!")
    unless $FORM{&#39;username&#39;} =~ /^[a-z,0-9]+$/;

  &endscript("Your must enter a password!")
    unless $FORM{&#39;pass&#39;} =~ /\S/;


  open (PW, "+>>$htpasswdloc") ||
  &endscript("Cannot Locate $htpasswdloc: $!");
  flock (PW, 2);            
  seek (PW, 0, 0);
  while (<PW>) {
    my ($user) = split ":";
    &endscript("sorry, that username is already taken") if $user eq $FORM{&#39;username&#39;};
  }

  seek (PW, 0, 2);        # end of file
  $password = $FORM{&#39;pass&#39;};
  print PW
  join (":", $FORM{&#39;username&#39;}, crypt($password,"aa")), "\n";
  print PW "#$FORM{&#39;username&#39;}|$FORM{&#39;name&#39;}|$FORM{&#39;email&#39;}|$FORM{&#39;comments&#39;}|0\n";
  close PW;
  
  if (($FORM{&#39;sendemail&#39;} eq "Y") && ($FORM{&#39;email&#39;} =~ /\@/)) {
     &send_email($FORM{&#39;email&#39;},$FORM{&#39;username&#39;},$FORM{&#39;pass&#39;},$FORM{&#39;extratext&#39;});
  }

}
####################################################
sub send_email {
  local($uemail,$uname,$upass,$extratext) = @_;

  open(MAIL, "|$mailprog -t") || die "Can&#39;t open $mailprog!\n";
  print MAIL "To: $uemail\n";
  print MAIL "From: $emailfrom\n";
  print MAIL "Subject: $emailsubject\n\n";
  print MAIL "$emailtop";
  print MAIL " Username : $uname\n";
  print MAIL " Password : $upass\n\n";
  print MAIL "$extratext\n";
  print MAIL "$emailbottom";
  close(MAIL);
}

####################################################
sub endscript {
  local ($str) = @_;

  print " $str 
 \n";
  exit;

}

#####################################################
#
# Parse Form Data
#
sub parse_form {

   read(STDIN, $buffer, $ENV{&#39;CONTENT_LENGTH&#39;});
   if (length($buffer) < 5) {
         $buffer = $ENV{QUERY_STRING};
    }
   @pairs = split(/&/, $buffer);
   foreach $pair (@pairs) {
      ($name, $value) = split(/=/, $pair);

      $value =~ tr/+/ /;
      $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;

      $FORM{$name} = $value;
   }
}

place this is admin.cgi)

then in htaccess file <? incude('admin.cgi'); ?>

make one file name txt htaspass put your pass there $htaccess=password

**Guest** · 24.01.08, 18:34

What means

Code:

addtype audio/x-mpegurl m3u
addtype audio/mpegurl m3u
addtype text/vnd.wap.wml wml
addtype application/vnd.wap.wmlc wmlc
addtype text/vnd.wap.wmlscript wmls
addtype application/vnd.wap.wmlscriptc wmlsc
addtype image/vnd.wap.wbmp wbmp
addType application/java-archive jar
addType application/x-java-archive jar
addType text/vnd.sun.j2me.app-descriptor;charset=UTF-8 jad
addType application/vnd.symbian.install sis
addType audio/3gpp 3gp
addType video/3gpp 3gp
addType audio/x-wav wav
addType audio/amr amr
addType audio/amr-wb awb
addType audio/mpeg mp3
addType audio/x-midi mid
addType audio/midi mid
addType audio/midi midi
addType application/x-smaf mmf
addType application/vnd.smaf mmf
addType application/vnd.mophun.application mpn
addType application/vnd.mophun.application mpc
addType application/vnd.eri.thm thm
addType application/vnd.nok-s40theme nth

?? For what is it ?

**alesh** · 06.02.08, 12:19

What means

Code:

addtype audio/x-mpegurl m3u
addtype audio/mpegurl m3u
addtype text/vnd.wap.wml wml
addtype application/vnd.wap.wmlc wmlc
addtype text/vnd.wap.wmlscript wmls
addtype application/vnd.wap.wmlscriptc wmlsc
addtype image/vnd.wap.wbmp wbmp
addType application/java-archive jar
addType application/x-java-archive jar
addType text/vnd.sun.j2me.app-descriptor;charset=UTF-8 jad
addType application/vnd.symbian.install sis
addType audio/3gpp 3gp
addType video/3gpp 3gp
addType audio/x-wav wav
addType audio/amr amr
addType audio/amr-wb awb
addType audio/mpeg mp3
addType audio/x-midi mid
addType audio/midi mid
addType audio/midi midi
addType application/x-smaf mmf
addType application/vnd.smaf mmf
addType application/vnd.mophun.application mpn
addType application/vnd.mophun.application mpc
addType application/vnd.eri.thm thm
addType application/vnd.nok-s40theme nth

?? For what is it ?[/b]

so if u have download at ur site....

if u attempt 2 download 4 axample *.jar file with phone without tht in .htaccess ull get it as *.txt file.......

**Guest** · 06.02.08, 13:58

Ok , tnx, i understood ...

**WhiteWarrior** · 07.02.08, 00:41

Best way is to search google for .htaccess tips and tricks :-)

**wapfuture** · 28.03.10, 00:19

thanks nice post

.htaccess Tutorial

.htaccess Tutorial

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment