|
|
Member Manager II
- Readme File
This program is a basic password management System.
The administration area MUST be in a password protected directory.
Never depend solely on the password file itself for any such
program.
File Locations and Permissions:
___________________________________________________________________
Create a directory above your web root. This directory will
contain the files
listed below. The permissions for each file is also listed. The
path to this
directory will look something like this:
/home/username/groups
NO TRAILING SLASH !
This directory MUST have permissions set to drwx-rwx-rwx ( chmod
777 )
The following files live inside this new directory:
.htgoup -rw-rw-rw- chmod 666
.htpasswd -rw-rw-rw- chmod 666
temp.htaccess.txt -rw-rw-rw- chmod 666
Create a directory somewhere within your web root directory. This
will be the root
of all new protected directories. So, if you created the directory
named "users"
the path would read like so:
/home/username/public_html/users
NO TRAILING SLASH !
This directory MUST have permissions set to drwx-rwx-rwx ( chmod
777 )
You should also be sure to add an index html file to this
directory.
---------------------------------------------------------------------
CONFIGURATIONS ( config.pl ) Edit the configurations in this file
as explained below.
---------------------------------------------------------------------
$location_of_mail_lib = "./mail-lib.pl";
This path should be fine if you have left the mail-lib.pl file in
the same
directory as the main script. If you have probelms, change it to
the full
syystem path to the file. That would look something like the
following:
/home/username/cgi-bin/library/mail-lib.pl
---------------------------------------------------------------------
$script_owners_address = 'members@example.com';
Your address. This will be used to send your copies of the
members information
in email when a new member is added, allowing you to keep a copy
of their passwords
handy, if you have this option turned on.
---------------------------------------------------------------------
$mail_administrator = 0;
This variable turns on and off the feature mentioned above. 1 is
on, 0 is off.
So, if it reads $mail_administrator = 1; you will receive an email
each time
a user is added with the program
---------------------------------------------------------------------
$location_of_group_info = "./members_setup.cgi";
This should be left alone if you have placed all files in the same
directory
( recommended -> except for the passwd.pwd file ) Again, all
programs such
as this should live in a password protected directory ( .htaccess
)
---------------------------------------------------------------------
$group_root = "/home/username/groups";
This is the directory that contains the .htpasswd and .htgroup
files. It should
not be kept in a directory that is accessable from the web, so the
format above
is STRONGLY recommended. This would mean creating a directory in
your home
directory, and here you will plave the .htaccess and .htpasswd
files. ( chmoded
666 so that the program has permission to write to them )
---------------------------------------------------------------------
$group_file = ".htgroup";
$pass_word_file = ".htpasswd";
Your group and password files. Leave them as the are.
They must be in the $group_root directory ( specified above ) and
be writable by the script -> chmod 666
---------------------------------------------------------------------
$admin_password = "./passwd.pwd";
This is the password file that comes with the program. If it is
placed in the same
directory as the rest of the program, leave it as is. However, you
could put it
above your web root, changing the path to:
$admin_password = "/home/user/passwd.pwd";
That would be a great place to put it.
---------------------------------------------------------------------
$user_root = "/home/username/public_html/users";
This is the root of all the password protected directories.
ALL directories that you create with the system should end
up here. The directory must have wide open permissions so that the
program
can create the new directories within it. chmod 777
ALL new protected directory paths should start with this root
directory.
---------------------------------------------------------------------
$location_of_htaccess_template = "/home/username/groups/temp.htaccess.txt";
The location of the .htaccess template. The program uses this
template to create
all new .htaccess files, and should live with the real .htpasswd
and .htgroup
files, although a different location can be specified.
---------------------------------------------------------------------
$location_of_front_door_template = "./front_door_template.htm";
$add_group_template = "./add_group.htm";
These are two templates used by the program. Leave them with the
main program,
and leave the paths as they are. If you have problems, try
changing all paths of
this type to the full system path, but this should not be
necessary.
---------------------------------------------------------------------
That should be it for the config file. Now upload the follwing
files
into the directory of your choice within your cgi-bin
manager.cgi -rwxr-xr-x- chmod 755
manager_setup.cgi -rw-rw-rw chmod 666
manager_config.pl -rw-r-r- chmod 644
mail-lib.pl -rw-r-r- chmod 644
passwd.pwd -rw-rw-rw- chmod 666
---------------------------------------------------------------------
USAGE NOTES
---------------------------------------------------------------------
Administration Area First Time:
The first time you log into the system your username is "member"
and your password
is "manager"
The first thing you will want to do is change this. Simply click
the "Change your
admin password" button and create your new username and password.
Adding Groups:
When you add a new group, a new directory is created with the path
that you
specify. It MUST start with the $user_root directory, and the $user_root
directory must have the correct permissions -> chmod 777
An .htaccess file is then placed in this new directory, which will
require
any users to be listed in the password and groupd files in the
group which
you have specified for this directory.
Example:
If you add a new group called "clients" and specify the new
directory path
to be $user_root/clients then the .htaccess file will be placed in
the clients
directory, and the group name required to gain access to this
directory will be
"clients" Only users listed in this group will have access to that
directory.
Removing Groups:
When you remove a group, all users associated with this group will
also be
removed, and the .htaccess file will be removed from the
associated protected
directory. If the script cannot remove the file ( if for example,
the permissions
on the directory have since been changed ) it will tell you that
it could not
remove it. You should then remove the file yourself.
Adding Users:
To add a new member to a group, view the group you want to add
them to and then
enter their username and a password. The password will be mailed
to you if you
have your configurations set to send you an email notification.
This way if a
user forgets their password, you can find it in the email.
The user you add will have access only to the group that you add
them to. If you
want them to have access to more than one group, enter them
seperatly for each
group, but BE SURE TO USE THE SAME PASSWORD FOR THAT USER IN EACH
GROUP THAT YOU
ADD THEM TO. If you fail to do so, the last password that you
enter for them will
be the one that works.
Removing Users:
When you remove a user they are removed from the .htgroup file,
and if you slect
to remove them from the password file as well, they will be taken
out of the .htpasswd
file. If the member is only listed in one group, remove the
password. If they are
listed in multiple groups, and you only want to remove them from
one group, do NOT
remove their password.
If you have any further questions, feel free to contact the
programs author at
barry@veinotte.com
There is a comrehensive users guide under development.
Check here: http://www.member-manager.veinotte.com
Questions? Check the new discussion forums here:
http://forums.veinotte.com
If you require additional support, you may purchase a
members area subscription here.
|
Join
our mailing list to be notified of upgrades,
bug reports and new product additions.
Enter your email address below.
You
can remove yourself at any time
http://odt.veinotte.com
|