allow access to awstats without cpanel login

[boatdesign]

I would like to allow some people access to awstats stats reports without allowing them access to the main cpanel login. How can I do this?

[johnmounsey]

Try here
http://www.josheli.com/vox/

[osfdeath]

It's likely those will no longer work as they depend on passing the usernameassword through the URL

Too bad because I really like those scripts

[Steve-PWH]

No they will work as its only IE that blocks that system PHP does not

[anand]

Originally posted by osfdeath
It's likely those will no longer work as they depend on passing the usernameassword through the URL

Too bad because I really like those scripts

The script in discussion uses curl to get the output from the location passing the usernameassword in url. Curl runs from inside the system, and IE never comes in between.

However always remember, with the kind of scripts being discussed, anytime your cpanel user password is updated, you would need to hand edit the file to change it. One place is ok, but if the number increase, it could be a problem.

[verdon]

Silly question maybe, but how much of a security issue are these kinds of scripts (with your cpanel name:word) hard-coded in the script.

Is your name:word vulnerable to http traffic, or just ftp?

[osfdeath]

So long as your php is configured properly it cannot be read however I usually use an include statement and put the username and pass in a seperate file in a password protected directory

[anand]

Originally posted by osfdeath
So long as your php is configured properly it cannot be read however I usually use an include statement and put the username and pass in a seperate file in a password protected directory

Just about the same time i was posting

verdon, method recommended by osfdeath is better.

As for question, if someone runs a sniffer, this would show up in that (i am sure it would, if i am wrong perhaps anyone can correct me)

[anand]

Originally posted by osfdeath
So long as your php is configured properly it cannot be read however I usually use an include statement and put the username and pass in a seperate file in a password protected directory

Watch out for servers where you have php base dir enabled. You would need to remove php basedir on the account if you include files from another directory than the user's own. OR include the password directory inside the httpd.conf entry for that user.

[BrightAdmin]

Hi,

This URL will help you to fix your issue

http://forums.cpanel.net/showthread....hlight=awstats

Regards,

Bright