Passwords are now stored encrypted on the website. The modified login.ccml contains the necessary code to read encrypted passwords in line 56, which is line 37 in the original login.ccml supplied with web to date 5.0. How the passwords are encrypted is explained in the installation section.
In addition, the script contains code to auto-login the administrator to the restricted pages. Auto-login is granted to the page if the correct encrypted password is passed to the page AND the page access is done from a registered originator IP address. Auto-login can be disabled, see Configuration section.
Web to date stores all passwords to the different pages, which are entered in the program at Datei –> Benutzer und Gruppen …, in the file w2dacl.php in the root directory of your website. This file needs to be modified with the encrypted passwords and stored manually on your website.
login.ccml | modified script for encrypted passwords and auto-login |
---|---|
w2dacl.php | modified access list for encrypted passwords and auto-login |
w2dacl.original.php | original access list as generated by web to date |
pass_gen.php | script to generate encrypted passwords |
readme.txt | readme file |
Before you install the necessary files, you need to configure your user accounts and scripts: