Protecting forum parts by htaccess - Page 2

		vb.org Archive > vBulletin Article Depository > Read An Article > General Articles
Protecting forum parts by htaccess

Page 2 of 2

Thread Tools

Protecting forum parts by htaccess

HolyKiller

Join Date: Dec 2006

Posts: 172

HolyKiller HolyKiller is offline

01-05-2010, 10:00 PM

I just found a thread about protecting Admin Panel via htaccess. It is usable and +1 for the author, but... The thing is, it supports only one login which need to be shared, if you have more admins, or, you want to protect Moderator panel too and have more than one moderator. So after every staff change, you need to change your pass and tell everybody, there is a new password. Second thing, you need to edit existing vbulletin files, so, you probably need to edit them over and over again after every vBulletin update. AND the third thing, that password are plain-text stored, which is not good at all.

Once again, i dont want insult that thread author, but, i just want share my way, how to do it more "sophisticated" AND secure

1) Create a files named .htaccess and .htpasswd
(if you using Windows and get error message, create a htaccess.txt and htpasswd.txt files for now)

2) In htaccess add:

Code:

AuthUserFile /*link.to.your.protected.dir*/.htpasswd
AuthType Basic
AuthName "Protected Area"
require valid-user

- You need to set a correct path, so, you can get it easilly like this:

2a) Create a new file and add code:
Code:
<?
 phpinfo();
?>
2b) Name that file like info.php and put it INTO your directory which you want to procect (admincp, cpmod, ... etc...)

2c) Open your browser and type path to your info.php file, so something like:
http://www.yoursite.com/forum/admincp/info.php

2d) You get a full information about your php. You need to find (use browser function) a row named SCRIPT_FILENAME and on the right side you can see absolute path to info.php file. Something like this: /var/www/yoursite.com/forum/admincp/info.php

2e) Copy that path into htaccess file and rewrite info.php to .htpasswd. So you actually got this in .htaccess file:
Code:
AuthUserFile /var/www/yoursite.com/forum/admincp/.htpasswd
AuthType Basic
AuthName "Protected Area"
require valid-user

3) Now you need to set up some usernames nad hashed passwords. I recomanded THIS page. It rly helps you. Just insert your username and password (that name and pass, what you want to use for protecting your files) and click on "Create Password". So for example we use username Anton and passsword whiteglass and we get this:

Code:

Anton:H8hXcFoiSNgtY

and thats exactly what we need, so we just copy&paste this into .htpasswd file. By the way, you can add more users into .htaccess file. Just generate more name/pass and add them, one on each row. So you can use your own name and pass, and your co-admin another username and password. Or if you protecting your modcp directory, you can create specific login for each moderator

4) Save both files and upload them on your server.

5) Now, try to access your admincp. You shoud get a small window popped up. If not, you did something wrong and you need to start over.

BTW: If you used htaccess.txt and htpasswd.txt names, you need to rename them after upload. The correct names are .htaccess and .htpasswd WITH that DOT on start!

Dont forget to delete that info.php file

Hope it helps

Yea, and sorry for my english, i'm from Czech republic

Holy

#12

03-24-2013, 06:00 PM

matrex722

Join Date: Jan 2007

Posts: 161

Благодарил(а): 0 раз(а)

Поблагодарили: 0 раз(а) в 0 сообщениях

thanks man
nice topic

#13

06-01-2014, 01:47 AM

DNN

Join Date: Mar 2011

Posts: 125

Благодарил(а): 0 раз(а)

Поблагодарили: 0 раз(а) в 0 сообщениях

What you mentioned didn't work, unless the part where it says "/*link.to.your.protected.dir*/" is supposed to have "mywebsite.com/admincp."

#14

06-01-2014, 02:08 AM

ForceHSS

Join Date: Apr 2008

Posts: 6,357

Благодарил(а): 0 раз(а)

Поблагодарили: 0 раз(а) в 0 сообщениях

This can be done from any cpanel without all this extra work

Page 2 of 2

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

Forum Jump

All times are GMT. The time now is 03:34 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04137 seconds Memory Usage 2,235KB Queries Executed 20 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (4)bbcode_code (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_article (1)navbar (4)navbar_link (120)option (1)pagenav (1)pagenav_curpage (1)pagenav_pagelink (4)post_thanks_box (1)post_thanks_box_bit (4)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit (4)post_thanks_postbit_info (3)postbit (4)postbit_onlinestatus (4)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start fetch_musername post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end post_thanks_function_fetch_thanks_bit_start post_thanks_function_show_thanks_date_start post_thanks_function_show_thanks_date_end post_thanks_function_fetch_thanks_bit_end post_thanks_function_fetch_post_thanks_template_start post_thanks_function_fetch_post_thanks_template_end postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!