0. { $htpasswd = file($file); $auth = array(); foreach($htpasswd as $h) { $array = explode(’:’,$h); $user = $array[0]; $pass = chop($array[1]); $auth[$user] = $pass; } return $auth; } else return array(); }

function sha1_htpasswd($pass) { return ‘{SHA}’ . base64_encode(pack(‘H*’, sha1($pass))); }

function valid_user($userpass, $user, $pass){

if(!isset($userpass[$user])){
	echo "User Password is not set. Please contact ADMIN to get default password

”; return false; }

$test = $userpass[$user];
if(strcmp(substr($test,0,5),'{SHA}') == 0)
	$status = strcmp(sha1_htpasswd($pass),$test);
else
	$status = strcmp(crypt($pass, substr($test,0,CRYPT_SALT_LENGTH)),$test);

if($status != 0){
	echo "User Password is incorrect!

”; return false; }

return true;

}

// ==================== // MAIN ACTION BLOCK // ====================

$app = $_POST[‘app’];

$file = ‘auths/’ . $app . ‘-auth-file’;

$userpass = load_htpasswd($file);

if(valid_user($userpass,$_POST[‘userName’],$_POST[‘userPwd’])){

$login = $_POST['userName'];
$newPwd = $_POST['newpwd'];
$rnewPwd= $_POST['rnewpwd'];

if ("$newPwd" === "$rnewPwd"){
	$cmd = '/usr/bin/htpasswd -sb ' . $file . ' ' . $login . ' ' . $newPwd . ' 2>&1';
	// echo "Executing $cmd ...

”; $out = shell_exec($cmd); echo “$out”; echo “Your password has been changed! ”; } else{ echo “Password doesn’t match ”; exit(); } } ?>

the inputs are passed to the php scripts from a simple HTML form