SiteLock - a visual password generator for sites from PHPShop

We often encounter the task of creating an additional password for the site and the control panel - this gives greater confidence in data integrity, and, of course, we recommend using this method to everyone more often. Of course, there are many ways to set a password, but still, they all require certain knowledge from the client. To make life easier for customers, we created a free visual password generation interface - SiteLock, which is suitable not only for PHPShop, but also for any other CMS . The generated passwords, in combination with .htaccess + .htpassw, are immediately copied to the site via the built-in ftp manager.

What are the best options for site protection?

As you know, the most common additional protection is Basic Authentication , it is used on most web projects, routers and similar devices. This password is good to protect the site from prying eyes at the time of its creation and testing. Putting an additional password is recommended by experts in the search and treatment of web viruses.

On some hosts, the password can be set via the built-in file manager (DirectAdmin, cPanel, etc.). However, as practice shows, a hoster usually advises creating a password via SSH, which is an almost impossible task for a regular user.
')
At first, we gave our customers the following installation instructions via FTP and password generator:

• Create a .htaccess file with content:
  
  

  AuthName "Member's Area" AuthType Basic AuthUserFile /home/username/username.ru/.htpasswd require valid-user 

  
  
• Create a file /home/username/username.ru/.htpasswd. To generate a login and password, we use the online service htpasswd-generator .

For some users, this instruction was shocking, or they could not determine the correct path AuthUserFile, and the site began to give out 500 errors, which discouraged all further desire to do this.

We decided to use a more user-friendly approach to creating a password and created a free SiteLock utility , where, apart from specifying ftp passwords and selecting an action on the site, nothing is required .

SiteLock is suitable not only for PHPShop, it can be used for any CMS . Sitelock offers to choose a folder for password protection through the built-in ftp manager. After connecting, the utility will create a server directory tree. If the site is on PHPShop, the utility recognizes it automatically and offers to create a password for the authorization folder of the store's control panel.



SiteLock is bundled with our brand free utility, EasyControl .
We already wrote about some of them.

SiteLock is also available separately as a downloadable application (700 Kb) for use on third-party projects.
We hope that SiteLock will be useful to you. Suggestions for improving SiteLock welcome.