Register Arama Bugünkü Mesajlar Mark Forums Read

Reply
 
Thread Tools
Protecting forum parts by htaccess Detaylar »
Protecting forum parts by htaccess
 
TTayfun's Avatar
TTayfun
TTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant futureTTayfun has a brilliant future
Gerçek Ad: MSc. Tayfun T.
Kayıt Tarihi: Nov 2017
Mesajlar: 218

Güzergah: Istanbul Anadolu
Show Printable Version Email this Page
yazar TTayfun 26 Jan 2018, 01:13

I just found a thread about protecting Admin Panel via htaccess. It is usable and +1 for the author, but... The thing is, it supports only one login which need to be shared, if you have more admins, or, you want to protect Moderator panel too and have more than one moderator. So after every staff change, you need to change your pass and tell everybody, there is a new password. Second thing, you need to edit existing vbulletin files, so, you probably need to edit them over and over again after every vBulletin update. AND the third thing, that password are plain-text stored, which is not good at all.

Once again, i dont want insult that thread author, but, i just want share my way, how to do it more "sophisticated" AND secure

1) Create a files named .htaccess and htpasswd
(if you using Windows and get error message, create a htaccess.txt and htpasswd.txt files for now)

2) In htaccess add:

Kod Blok Kilitli:      (Kayıt veya giriş yapmalısın)  
Engellenmiş, kayıtlı olmayan veya onay bekleyen kişiler kodlara erişemezler.

- You need to set a correct path, so, you can get it easilly like this:
2a) Create a new file and add code:

Kod Blok Kilitli:      (Kayıt veya giriş yapmalısın)  
Engellenmiş, kayıtlı olmayan veya onay bekleyen kişiler kodlara erişemezler.

2b) Name that file like info.php and put it INTO your directory which you want to procect (admincp, cpmod, ... etc...)

2c) Open your browser and type path to your info.php file, so something like:
hostingdomains.com

2d) You get a full information about your php. You need to find (use browser function) a row named SCRIPT_FILENAME and on the right side you can see absolute path to info.php file. Something like this: /var/www/yoursite.com/forum/admincp/info.php

2e) Copy that path into htaccess file and rewrite info.php to .htpasswd. So you actually got this in .htaccess file:


Kod Blok Kilitli:      (Kayıt veya giriş yapmalısın)  
Engellenmiş, kayıtlı olmayan veya onay bekleyen kişiler kodlara erişemezler.

3) Now you need to set up some usernames nad hashed passwords. I recomanded THIS page. It rly helps you. Just insert your username and password (that name and pass, what you want to use for protecting your files) and click on "Create Password". So for example we use username Anton and passsword whiteglass and we get this:


Kod Blok Kilitli:      (Kayıt veya giriş yapmalısın)  
Engellenmiş, kayıtlı olmayan veya onay bekleyen kişiler kodlara erişemezler.

and thats exactly what we need, so we just copy&paste this into .htpasswd file. By the way, you can add more users into .htaccess file. Just generate more name/pass and add them, one on each row. So you can use your own name and pass, and your co-admin another username and password. Or if you protecting your modcp directory, you can create specific login for each moderator

4) Save both files and upload them on your server.

5) Now, try to access your admincp. You shoud get a small window popped up. If not, you did something wrong and you need to start over.


BTW: If you used htaccess.txt and htpasswd.txt names, you need to rename them after upload. The correct names are .htaccess and .htpasswd WITH that DOT on start!

Dont forget to delete that info.php file

Hope it helps

Yea, and sorry for my english, i'm from Czech republic

Holy

Protecting forum parts by htaccess - vBulletin.org Forum
Views: 50
Reply

Thread Tools

Posting Rules
Yeni konu açamazsınız.
You may not post replies
You may not post attachments
Mesajınızı düzenleyemezsiniz.

BB code is Açık
Smilies are Açık
[IMG] code is Açık
HTML code is Kapalı

Forum Atla


New To Site? Need Help?

All times are GMT +3. The time now is 16:00.

Tasarım Özelliği | Genişlik: Geniş Renk: Protecting forum parts by htaccess Protecting forum parts by htaccess Protecting forum parts by htaccess Protecting forum parts by htaccess Protecting forum parts by htaccess