passwords and security

[bazz]

I am Going to use an .htpasswd file to store usernames and passwords which one perl file can write new ones to and another can read from.

What I need to ask you guys is; can I fill out the htpsswd file like this:

Uname:EncryptedPasssword:Client data

I want to use the secuirty of the htpsswd file location but read from it in a different way to get more values from. I shan't be using htaccess for this part.

Any tips welcome

bazz

[KevinADC]

use your own file, encrypt it however you like, and add any information you want to it. Name the file .htpasswd if you want but you can name the file anything. If possible store the file above the web root, where it will be secure from casual internet access but your scripts can read/write to it.

[FishMonger]

I want to use the secuirty of the htpsswd file location but read from it in a different way to get more values from. I shan't be using htaccess for this part.
In that case, you'll need to modify the apache source code and compile a custom version of the apachectl.

The best approach would be to use a MySQL database. Second choice would be a csv file that is NOT named .htpasswd.

[bazz]

Thanks both for your responses.

In that case, you'll need to modify the apache source code and compile a custom version of the apachectl.


:eek: :eek: Scary stuff :D I think I'll go with the MySQL solution.

bazz