.htaccess and .staccess - need seriouse help

New Member Joined: Mar 03, 2005 Posts: 10

Hello,

I have officially started pulling my hair out because i cant run this. I got hacked for the 2nd time yesterday in 3 days.

Ok here it is :

I installed nuke sentinel but cannot configure the .htaccess files in anyway. Heres the steps i took :

1: Configured my authorization password and name in CGI Auth
2: I uploaded the sample.htaccess and sample.staccess files into my nuke root
3: I change the CHMOD on htaccess to 666
4:I went into cgi config, copied the code between the ****** and pasted it into sample.htacces
5: I renamed the files to .htaccess and staccess
6:In Sentinel Config i located the directory where both the files are located
7: Pressed save

And now i still cannot login into my account, I type everything but nothing works.

Someone please help me this is driving me nuts, and i am scared that I will have my site hacked again

I searched this site for answers, google, other sites and nothing has helped me. If someone could help me with this step by step as thorough as they can i would greatly appreciate it..

Please..

Thanks

Posted: Thu Mar 03, 2005 7:15 am

Hello,

just take a look at the FAQ:

http://www.ravenphpscripts.com/modules.php?name=User_Guide&op=menu_faq

Greetz
Susann

Posted: Thu Mar 03, 2005 7:32 am

Yes, someone directed me to that link yesterday from a different site, i tried most of that and nothing works, you are no help.. I tried everything...

Posted: Thu Mar 03, 2005 7:43 am

Also the problem is not me not getting to log in, all i do to get back to admin is delete the 2 files.. Please help me personmally instead of directing me, People directed me here now you direct me to other places

Posted: Thu Mar 03, 2005 9:12 am

Sorry, but many people don `t know the FAQ or dont `read the Nuke Sentinel FAQ.

Does this work ?First login as admin then upload .htaccess.

RavensScripts

Posted: Thu Mar 03, 2005 12:28 pm

No it didnt help,

Is there anything i should put in the staccess file?? Like the username and password. The file is empty at the moment

Posted: Thu Mar 03, 2005 1:56 pm

Read through this thread http://www.ravenphpscripts.com/postt2950.html and use the form given there to manually create the password using the same salt you have in your Nuke Sentinel config.

This is pretty simple to setup really and frustrated or not its no reason to get a witchy towards Susann for trying point you in the right direction. Yes she is 100% right that most people having problems with this don't take the time to read any of the documentation at all.

Now on to help...

Post your htaccess and staccess files so that we can see if there is something your doing wrong. Such as not setting the path in the htaccess file so it can find the staccess file and so on.

Posted: Sat Mar 05, 2005 11:40 pm

my htaccess :

# -------------------------------------------
# Start of NukeSentinel(tm) admin.php Auth
# -------------------------------------------
<Files .staccess>
deny from all
</Files>

<Files admin.php>
<Limit GET POST PUT>
require valid-user
</Limit>
AuthName "Restricted by NukeSentinel(tm)"
AuthType Basic
AuthUserFile /home/mysite/public_html/.staccess
</Files>
# -------------------------------------------
# End of NukeSentinel(tm) admin.php Auth

And staccess is empty
# -------------------------------------------

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Quote:

And staccess is empty
# -------------------------------------------

If it is empty then you haven't set the userid and password as instructed above. The very first post in http://www.ravenphpscripts.com/postt2950.html instructs how to create the password and install it in .staccess.

New Member Joined: Mar 08, 2005 Posts: 18

ok my friend im having trouble with installing the user pass to staccess ive read the links to install it but as i have no idea about php or its coding where do you set user pass in the script as shown here

<form method='post'>
Enter password to be encrypted using crypt(): <input name='pw'><br /><br />
Enter the 'salt' value for the encryption (2 long): <input name='salt' maxlength='2'><br /><br />
<input type='submit' name='submit' value='Encrypt'><br /><br />
<?
if (isset($_POST['submit'])&&isset($_POST['pw'])&&!empty($_POST['pw'])) {
echo "Password <b>".$_POST['pw']."</b> translated is <b>".crypt($_POST['pw'],$_POST['salt'])."</b>";
}

this is doin my head in as i cant log into site unless i remove htaccess everythin else seems to work fine otherwise please help a thick old man lol

Posted: Tue Mar 08, 2005 10:57 am

You save that code to a file and ftp it to your site. Then you run that script and fill in the blanks. Then you transfer the results to your .staccess file.

Posted: Tue Mar 08, 2005 2:11 pm

ok i did what was said i ftp file got this result in browser

Password ******** translated is *************

i added that to staccess and still gives me the finger what am i doin wrong

Posted: Tue Mar 08, 2005 2:20 pm

In the .staccess file, the format is usernname:password

So, you should have an entry like
raven:45dghdg43653h

Posted: Tue Mar 08, 2005 2:37 pm

ok done that my friend when i upload both ht an st files still get no entry to site here what is in the ht

# -------------------------------------------
# Start of NukeSentinel(tm) admin.php Auth
# -------------------------------------------
<Files home/******/public_html/******/.staccess>
deny from all
</Files>
<Files admin.php>
<Limit GET POST PUT>
require valid-user
</Limit>
AuthName "Restricted"
AuthType Basic
AuthUserFile home/******/public_html/******/.staccess
</Files>
# -------------------------------------------
# End of NukeSentinel(tm) admin.php Auth
# -------------------------------------------

and in st

letmein:11op4V89okljr

well summat to that effect is there anything i need to do in sentinal settings before uploading both files???? lol if i only had a brain lol

Posted: Wed Mar 09, 2005 6:25 am

i sorted it out after many hours readin your forums thanks for your help buddy RavensScripts