#!/usr/bin/perl
#
# password protect.
use Apache::Htpasswd;
$header = "Password Protect
";
# Get the form input
read(STDIN, $input, $ENV{'CONTENT_LENGTH'});
@pairs = split(/&/, $input);
foreach $pair (@pairs) {
($name, $value) = split(/=/, $pair);
$name =~ tr/+/ /;
$name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$FORM{$name} = $value;
}
$username = $FORM{'username'};
$password = $FORM{'password'};
$root_dir = $ENV{'SERVER_NAME'};
$root_dir =~ s/\.com|\.net|\.org//i;
$root_dir =~ s/www.//i;
$docroot = $root_dir;
$root_dir = "/www/htdocs/".$root_dir;
$secure_dir = $FORM{'dir'};
$url = "http://".$ENV{'SERVER_NAME'}.$secure_dir;
$secure_dir = $root_dir.$secure_dir;
$uid = (stat($secure_dir))[4];
$owner = (getpwuid($uid))[0];
$script_url = "http://".$ENV{'SERVER_NAME'}."/cgi-bin/cgiwrap/$owner/password_protect.cgi";
$mailprog = "/usr/sbin/sendmail";
$admin_email = $owner."\@".$ENV{'SERVER_NAME'};
$subject = "Planetmind Admin: Password Protection info for $docroot";
$from = "synapse\@planetmind.net";
if ($FORM{'submit'}) {
if (!(-e "../admin/.htpasswd")) {$ex = `touch ../admin/.htpasswd`;}
$foo = new Apache::Htpasswd("../admin/.htpasswd");
print "Content-type: text/html\n\n";
print $header;
$htaccess = $secure_dir."/.htaccess";
open(DBASE, ">$htaccess") || print "I can't open $htaccess\n";
print DBASE "AuthUserFile /www/htdocs/$docroot/admin/.htpasswd
AuthGroupFile /dev/null
AuthName \"Private Location\"
AuthType Basic
require user $username
";
close(DBASE);
$call = $foo->htpasswd("$username", "$password");
if ($call == 1) {
print "The URL $url is now protected.
Use this information to access it:
Username: $username
Password: $password
\n";
} else {
if ($foo->error() =~ /exists/) {
print "The user $username exists - please go back and choose another.
";
} else {
print "An error occured: $foo->error(). Please go back and try again.
";
}
}
print "
[Back to Admin Page]";
print "";
open (MAIL, "|$mailprog $admin_email") || die "Can't open $mailprog!\n";
print MAIL "From: $from\n";
print MAIL "To: $admin_email\n";
print MAIL "Subject: $subject\n\n";
print MAIL "Here is the password protection information you recently set up. Please retain this
email for your records.
Protected URL: $url
Username: $username
Password: $password
Thanks for using the Planetmind Site Admin Tools!
";
close(MAIL);
exit;
}
if ($FORM{'unprotect'}) {
$call = system("rm -f $secure_dir/.htaccess");
# print "
Result = ".$call;
print "Content-type: text/html\n\n";
print $header;
print "The URL $url is now un-protected. ";
print "
[back to Admin Page]";
print "