htAdmin is a web interface to administering your username and password access to directories on web pages served by the Apache web server. I wrote this for clients who do not really understand or wish to understand how basic authentication of a web server works. The program will create a configuration file (eg .htaccess) and a password file (eg. .htpasswd).
There are two levels of protection. The directory which contains the htAdmin program files can be protected. In the configuration file of the program several other directories can be specified that should be protected.
Once on the htAdmin menu, users can be added, deleted and edited. One way encryption is used and therefore, we cannot retrieve a users password. For this reason I create a control file which has all the passwords in plain text. This function can be disabled as it makes this, "not very secure" authentication even more insecure. However, this system is not meant for encryption against vandals who have nothing better to do than destroying other peoples' property. The information protected by the system should thus preferably be of no interest to such idiots.
The password file has been extended to include an expiry date and an email address. This allows two things:
The following is a summary of the systems features:
Try the htAdmin system. The username is administrator and the password is password. Add a username and password for yourself to get access to the protected directories. Don't use the multi-add or email add, since the mailing is switched off, you won't be able to get your password.
Although everything seems to work so far, it is still a work in progress. I hope to make it more user friendly and maybe add a few more features. Any comments will be welcome.