Setup BASIC auth for sensitive admin pages

andreuka · Feb 2, 2013 · a872a48 · a872a48
1 parent bc9b266
commit a872a48
Show file tree

Hide file tree

Showing 2 changed files with 37 additions and 3 deletions.
diff --git a/setup/apc.conf.php b/setup/apc.conf.php
@@ -1,8 +1,22 @@
 <?php
-  defaults('USE_AUTHENTICATION', 0);
+  defaults("USE_AUTHENTICATION", 0);
 
-  if (getenv('ENABLE_APC') != 'true') {
-    header('HTTP/1.0 403 Forbidden');
+  if (getenv("ENABLE_SYSTEM_ACCESS") != "true") {
+    header("HTTP/1.0 403 Forbidden");
     exit();
   }
+
+  if (getenv("SYSTEM_USERNAME") == "" || getenv("SYSTEM_PASSWORD") == "") {
+    header("HTTP/1.0 403 Forbidden");
+    exit();
+  }
+
+  if ($_SERVER["PHP_AUTH_USER"] == getenv("SYSTEM_USERNAME") &&
+      $_SERVER["PHP_AUTH_PW"] == getenv("SYSTEM_PASSWORD")) {
+    # Show page
+  } else {
+    header("WWW-Authenticate: Basic realm='System access'");
+    header("HTTP/1.0 401 Unauthorized");
+    print "Access denied!\n";
+  }
 ?>
diff --git a/setup/phpinfo.php b/setup/phpinfo.php
@@ -0,0 +1,20 @@
+<?php
+  if (getenv("ENABLE_SYSTEM_ACCESS") != "true") {
+    header("HTTP/1.0 403 Forbidden");
+    exit();
+  }
+
+  if (getenv("SYSTEM_USERNAME") == "" || getenv("SYSTEM_PASSWORD") == "") {
+    header("HTTP/1.0 403 Forbidden");
+    exit();
+  }
+
+  if ($_SERVER["PHP_AUTH_USER"] == getenv("SYSTEM_USERNAME") &&
+      $_SERVER["PHP_AUTH_PW"] == getenv("SYSTEM_PASSWORD")) {
+    phpinfo();
+  } else {
+    header("WWW-Authenticate: Basic realm='System access'");
+    header("HTTP/1.0 401 Unauthorized");
+    print "Access denied!\n";
+  }
+?>