WEB Mail

Development Platform:
PHP

action_htaccess_addprotect_file.php：Code Content
							<?php
$write_file = false;
include ('action_htaccess_guess.php');
include ('./extensions/htaccess.class.php');
echo "<form action=execute.php method=POST>n";
echo "<input type=hidden name=action value="".$_POST['action']."">n";
echo "<input type=hidden name=target_folder value="".$_POST['target_folder']."">n";
echo "<input type=hidden name=target_type value="".$_POST['target_type']."">n";
echo "<table border=0>n";
if ($state != VALID_USER)
{
    // changing state
    if ($_POST['change_state'])
    {
        // setting new rules
        $write_file = true;
    }
    else
    {
        // form to ask to change to new rules
        echo "<tr><td>".$get_string->get('change_rules')."</td><td>";
        echo "<input type=radio name=change_state value=1>".$get_string->get('yes')."n";
        echo "<input type=radio name=change_state value=0>".$get_string->get('no')."n";
        echo "</td></tr>n";
    }
}
else
{
    // the same or no rules adding
    if ($_POST['writefile']) 
        $write_file = true;
    else
        $write_file = false;    
}
if ($state != NO_RULE)
{
    $userfile = stripslashes($_POST['userfile']);
    $authname = $_POST['authname'];
}
    
// default values 
if ('' == $userfile) $userfile = realpath_alternative($target_folder.'.htpasswd');
if ('' == $authname) $authname = 'Restricted Area';
if ($write_file)
{
    $htaccess_str  = 'Order allow,deny'."n";
    $htaccess_str .= 'Allow from all'."n";
    $htaccess_str .= 'AuthUserFile "'.$userfile.'"'."n";
    $htaccess_str .= 'AuthName "'.$authname.'"'."n";
    $htaccess_str .= 'AuthType Basic'."n";
    $htaccess_str .= 'require valid-user'."n";
    /*
    $htaccess_str  = '# PAT valid user'."n";
    $htaccess_str .= 'AuthUserFile "'.$userfile.""n";
    $htaccess_str .= 'AuthName "'.$authname.'"'."n";
    $htaccess_str .= 'AuthType Basic'."n";
    $htaccess_str .= '<Limit GET POST>'."n";
    $htaccess_str .= 'require valid-user '."n";
    $htaccess_str .= '</Limit>'."n";
    */
    
    $fp = fopen($target_folder.'.htaccess',"w+");
    if (FALSE == $fp) echo $get_string->get('failed_open_file')."n";
    else
    {
        fputs($fp,$htaccess_str);
        fclose($fp);
        echo "<p><i>".$get_string->get('protection_success')."</i></p>n";
    }
}
else
{
    // displaying end of form
    echo "<tr><td>Auth User File</td><td><input type=text name=userfile value="$userfile" style="width=400px"></td></tr>n";
    //echo "<tr><td>Auth Group File</td><td></td></tr>n";
    echo "<tr><td>Auth Name</td><td><input type=text name=authname value="$authname" style="width=400px"></td></tr>n";
    echo "</table>n";
    echo "<input type=hidden name=writefile value=1>n";
    echo "<input type=submit name=submit value="Protect">n";
    echo "</form>n";
}

						