Chatter - Secure it

(Page 5 of 5 )

You may have noticed that cbadmin.php calls a file called accesscontrol.php on the first line. This file is used to place a password on your chatterblock admin area.

<?php
$adlogin = "test";
$adpassword = "test";
if (!isset($PHP_AUTH_USER)) {
header('WWW-Authenticate: Basic realm="ChatterBlock Admin"');
header('HTTP/1.0 401 Unauthorized');
echo 'Authorization Required.';
exit;
} else if (isset($PHP_AUTH_USER)) {
if (($PHP_AUTH_USER != $adlogin) || ($PHP_AUTH_PW != $adpassword)) {
header('WWW-Authenticate: Basic realm="ChatterBlock Admin"');
header('HTTP/1.0 401 Unauthorized');
echo 'Authorization Required.';
exit;
}else{
session_register("aid");
session_register("apass");
}
}
?>

Save this file as accesscontrol.php, and you will now have password protection on your ChatterBlock Admin script.

Conclusion

That's it. A quick and fast tutorial. This chatterblock is very basic, can post and can view. It doesn't really have other nifty functions such as smilies or profanities checking. Once you get the basic chatterblock, you can always add features and functions later on.

DISCLAIMER: The content provided in this article is not warranted or guaranteed by Developer Shed, Inc. The content provided is intended for entertainment and/or educational purposes in order to introduce to the reader key ideas, concepts, and/or product reviews. As such it is incumbent upon the reader to employ real-world tactics for security and implementation of best practices. We are not liable for any negative consequences that may result from implementing any information covered in our articles or tutorials. If this is a hardware review, it is not recommended to open and/or modify your hardware.

Comments On: Chatter

· Once again, after criticising the "Building a Quick and Easy Tag Board" article, I...    · I was to trying the scripts but when others user posting into it ..iframe shout box...   >>> Post your comment now!