Medium .htaccess protection - Revision history

Admin: /* MEDIUM2 WAY */

2013-08-04T17:55:05Z

MEDIUM2 WAY

← Older revision		Revision as of 20:55, 4 August 2013
Line 119:		Line 119:
	}		}
	if($count->fetchColumn() > 0){		if($count->fetchColumn() > 0){
			$file = $_GET['file'];
	$fh = fopen($file, 'rb');		$fh = fopen($file, 'rb');
	header("Content-Type: ".ftype($file));		header("Content-Type: ".ftype($file));

Admin: /* HOW */

2013-08-04T14:55:48Z

HOW

← Older revision		Revision as of 17:55, 4 August 2013
Line 26:		Line 26:
	</source>		</source>

			==MEDIUM2 WAY==
	You can do it somehow in another way .. you can make a page "auth.php" that would use sqlite to have a database user/ip/date ..		You can do it somehow in another way .. you can make a page "auth.php" that would use sqlite to have a database user/ip/date ..
	<source lang="php">		<source lang="php">

Admin: /* HOW */

2013-08-04T14:54:10Z

HOW

← Older revision		Revision as of 17:54, 4 August 2013
Line 79:		Line 79:
	RewriteCond %{ENV:DEXISFILE} ^yes$		RewriteCond %{ENV:DEXISFILE} ^yes$
	RewriteCond %{ENV:DEXISPLAYER} ^yes$		RewriteCond %{ENV:DEXISPLAYER} ^yes$
	RewriteRule .* play.php?file=%{REQUEST_FILENAME} [L]		RewriteRule ^ play.php?file=%{REQUEST_FILENAME} [L]
	AuthType Basic		AuthType Basic
	AuthName "Restricted Files"		AuthName "Restricted Files"

Admin: /* HOW */

2013-08-04T14:53:36Z

HOW

← Older revision		Revision as of 17:53, 4 August 2013
Line 76:		Line 76:
	RewriteCond %{ENV:DEXISPLAYER} ^yes$		RewriteCond %{ENV:DEXISPLAYER} ^yes$
	RewriteCond %{REQUEST_FILENAME} -d		RewriteCond %{REQUEST_FILENAME} -d
	RewriteRule . - [F,L]		RewriteRule ^ - [F,L]
	RewriteCond %{ENV:DEXISFILE} ^yes$		RewriteCond %{ENV:DEXISFILE} ^yes$
	RewriteCond %{ENV:DEXISPLAYER} ^yes$		RewriteCond %{ENV:DEXISPLAYER} ^yes$

Admin: /* HOW */

2013-08-04T14:41:57Z

HOW

← Older revision		Revision as of 17:41, 4 August 2013
Line 35:		Line 35:
	$_SERVER['REMOTE_USER'] = 'cli';		$_SERVER['REMOTE_USER'] = 'cli';
	}		}
	$db = new PDO('sqlite:sqlite.db');		$db = new PDO('sqlite:/tmp/sqlite.db');
	$query = 'CREATE TABLE IF NOT EXISTS auth (id int, user varchar(32), ip varchar(15), data int, PRIMARY KEY (id))';		$query = 'CREATE TABLE IF NOT EXISTS auth (id int, user varchar(32), ip varchar(15), data int, PRIMARY KEY (id))';
	if(!$create = $db->prepare($query)){		if(!$create = $db->prepare($query)){

Admin: /* HOW */

2013-08-04T14:38:36Z

HOW

← Older revision		Revision as of 17:38, 4 August 2013
Line 122:		Line 122:
	header("Content-Length: " . filesize($file));		header("Content-Length: " . filesize($file));
	fpassthru($fh);		fpassthru($fh);
			}else{
			header('HTTP/1.0 403 Forbidden');
	}		}
	</source>		</source>

Admin: /* HOW */

2013-08-04T14:35:38Z

HOW

← Older revision		Revision as of 17:35, 4 August 2013
Line 71:		Line 71:
	SetEnvIf User-Agent "^some" DEXISPLAYER=yes		SetEnvIf User-Agent "^some" DEXISPLAYER=yes
	SetEnvIf User-Agent "^browser" DEXISPLAYER=yes		SetEnvIf User-Agent "^browser" DEXISPLAYER=yes
	SetEnvIf User-Agent "^ thing" DEXISPLAYER=yes		SetEnvIf User-Agent "^thing" DEXISPLAYER=yes
	RewriteEngine On		RewriteEngine On
	RewriteBase /path/to/play/		RewriteBase /path/to/play/

Admin at 14:34, 4 August 2013

2013-08-04T14:34:39Z

← Older revision		Revision as of 17:34, 4 August 2013
Line 62:		Line 62:

	Now you have a database and can auto limit so only a specified ip can access those files without a password for a specified time :)		Now you have a database and can auto limit so only a specified ip can access those files without a password for a specified time :)

			This .htaccess will redirect all requests for those .ex1, .ex2 and .ex3 extensions that also come with a specified browser to play.php which will check the sqlite db and passthrough the requested file .. also, we will be replying a 403 for any dir index from those browsers...
	<source lang="bash">		<source lang="bash">
	Options +Indexes		Options +Indexes
Line 69:		Line 71:
	SetEnvIf User-Agent "^some" DEXISPLAYER=yes		SetEnvIf User-Agent "^some" DEXISPLAYER=yes
	SetEnvIf User-Agent "^browser" DEXISPLAYER=yes		SetEnvIf User-Agent "^browser" DEXISPLAYER=yes
	SetEnvIf User-Agent "^thing" DEXISPLAYER=yes		SetEnvIf User-Agent "^ thing" DEXISPLAYER=yes
	RewriteEngine On		RewriteEngine On
	RewriteBase /path/to/play/		RewriteBase /path/to/play/
			RewriteCond %{ENV:DEXISPLAYER} ^yes$
			RewriteCond %{REQUEST_FILENAME} -d
			RewriteRule . - [F,L]
	RewriteCond %{ENV:DEXISFILE} ^yes$		RewriteCond %{ENV:DEXISFILE} ^yes$
	RewriteCond %{ENV:DEXISPLAYER} ^yes$		RewriteCond %{ENV:DEXISPLAYER} ^yes$
Line 87:		Line 92:
	</RequireAny>		</RequireAny>
	</source>		</source>

			Here's the play.php file

	<source lang="php">		<source lang="php">

Admin: /* HOW */

2013-08-04T13:46:31Z

HOW

@@ Line 24: / Line 24: @@
      </RequireAll>
 </RequireAny
 </source>

Admin: Created page with "==WHY== Because I wanted to give some access to sime files based on some stuff .. ==HOW== This will allow users with the user-agents starting with "Thing", "Some" and "Bro..."

2013-08-04T12:21:20Z

Created page with "==WHY== Because I wanted to give some access to sime files based on some stuff .. ==HOW== This will allow users with the user-agents starting with "Thing", "Some" and "Bro..."

New page

==WHY==

Because I wanted to give some access to sime files based on some stuff ..

==HOW==

This will allow users with the user-agents starting with "Thing", "Some" and "Browser" to directly access files with extensions ".ex3", ".ex2" and ".ex1" without needing a password... it's useful for example on tablets where the players don't/can't auth...
<source lang="bash">
AuthType Basic
AuthName "Restricted Files"
AuthUserFile /path/to/.passwords
AuthGroupFile /path/to/.groups
SetEnvIf User-Agent ^Thing isplayer=1
SetEnvIf User-Agent ^Some isplayer=1
SetEnvIf User-Agent ^Browser isplayer=1
SetEnvIf Request_URI "\.ex3$" isfile=1
SetEnvIf Request_URI "\.ex2$" isfile=1
SetEnvIf Request_URI "\.ex1$" isfile=1
<RequireAny>
Require group onegroup anothergroup
<RequireAll>
Require env isfile
Require env isplayer
</RequireAll>
</RequireAny
</source>