how to edit .htpasswd using php?

Question

hey all

i have a protected directory where only user on .htpasswd can access, but sometimes it requires the user to change password or username, edit a specific username password to his username him self

sample users
kevien : kka
mike : mike

And let say i want to change kevien to XYZ

And same thing goes to password

Answer 1

Don't. Store your authdb in a database instead, via e.g. mod_auth_mysql.

Answer 2

You could use php's exec to call htpasswd and change it:

exec('htpasswd -nb someusername somepassword', $output);

http://php.net/manual/en/function.exec.php

Answer 3

Googled "php generate htpasswd", got this article: How to create a password for a .htpasswd file using PHP.

The key line seems to be:

$password = crypt($clearTextPassword, base64_encode($clearTextPassword));

So I imagine you'd read in the file contents with file_get_contents, parse it into an associative array, modify the relevant entries (encrypting the password as shown above), write the array back into a string, and use file_put_contents to write the file back out.

This is most definitely not standard practice, however. Sounds like the job for a database. If you feel weird about setting up a whole database server, and your host supports it, SQLite might be a good choice.

Answer 4

Ofc this is just a sample, that will read your current file, find the given username and change either it is password of username.

Please keep in mind that this code is not safe and you would still need to parse the username and password so it does not break your file.

    $username = $_POST['user'];
    $password = $_POST['pass'];
    $new_username = $_POST['newuser'];
    $new_password = $_POST['newpass'];
    $action = $_POST['action'];
    //read the file into an array
    $lines = explode("\n", file_get_contents('.htpasswd'));

    //read the array and change the data if found
    $new_file = "";
    foreach($lines as $line)
    {
        $line = preg_replace('/\s+/','',$line); // remove spaces
        if ($line) {
            list($user, $pass) = split(":", $line, 2);
            if ($user == $username) {
                if ($action == "password") {
                    $new_file .= $user.':'.$new_password."\n";
                } else {
                    $new_file .= $new_username.':'.$pass."\n";
                }
            } else {
                $new_file .= $user.':'.$pass."\n";
            }
        }
    }

    //save the information
    $f=fopen(".htpasswd","w") or die("couldn't open the file");
    fwrite($f,$new_file);
    fclose($f);