<?php exit; ?>

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Main protection script configuration
;
; Here, settings within the protection script can be configured.
; NOTE: Any setting that starts with a semicolon (;) is commented out, and therefore isn't active.
; To activate the setting, remove the semicolon from the beginning of the line.
;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; [main]: The main part of this file to set up configuration
; sourcepath: This is the path to the admin panel (required)
; authmethods: This is a list of authentication sources for this script.
;   Examples
;   authmethods="htpasswd_1,mysql_1"
;   authmethods="mysql_1"
;   authmethods="htpasswd_1"
;   authmethods="nats_1"
; defaultredirect: The URL users will be directed to by default if they access the login page directly.
; sitename                     : For multiple installs of the protection script, be sure to use a separate name for each members area that has different logins / passwords.
; captcha [pro protection only]: The captcha can be set to the value "on", "off", or "failedlogin". Failedlogin only shows the captcha if a user fails to log in the first time.
; slurptext: Slurp Protection:
;   Default Value: antslrp
;   If any URL includes the following text, the user will be logged out. This prevents bot scripts from downloading all content.
; loginpath: Sets the relative path of where the login page scripts are. Commented out by default since standard installs go to /elxprotect/
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[main]
sourcepath="/path/to/cms_admin/"
authmethods="htpasswd_1"
;use_xsendfile=1
defaultredirect="/members/"
sitename=""
captcha="on"
hash=""
;slurptext="antslrp"
;loginpath="/elxprotect/"
cookiedomain="default"

;pro=1 ;;;; TODO: TAKE THIS OUT FOR THE RELEASE VERSION


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Pages
;
; loginpage: The standard login page. If commented out, loads the default page.
;   Default Value: custom_loginpage.php
; errorpage: The standard error page. If commented out, loads the default page.
;   Default Value: custom_errorpage.php
; 404page: The standard 404 page. If commented out, loads the default page.
;   Default Value: custom_404.php
;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[pages]
;loginpage="custom_loginpage.php"
;errorpage="custom_errorpage.php"
;404page="custom_404.php"
;banned="custom_banned.php"


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Sample .htpasswd authentication method
;
; To integrate sites like CCbill, it should just be a matter of changing the link to the .htpasswd file location.
;
; label: The name of the autentication method you're using.
; method: The type of method you're using. In this case, there is support for "mysql" and "passfile"
; file: The absolute position to the file listing all of the username / passwords.
;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;


[htpasswd_1]
label="Standard .htpasswd file"
method="passfile"
file=".htpasswd"


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Sample MySQL authentication method
;
; In this sample, the system connects to a database in order to authenticate this user.
; Note: For NATS databases, please use the example below instead [nats_1]
;
; label: The name of the autentication method you're using.
; method: The type of method you're using. In this case, there is support for "nats", "mysql" and "passfile"
;
; db_host: The hostname of the MySQL server.
; db_user: The username to the MySQL database
; db_pass: The password to the MySQL database
; database: The MySQL database name that contains the user table information
; table: The database table that contains the user table.
; username_column: The username column within the user table list.
; password_column: The password column within the user table list.
; salt: If the password field in the database is hashed and there is a Salt field, this is the column in the database that
;       Contains the salt value.
; hash: If the password field in the database is hashed, this determines the hashing mechanism that's used (md5 or sha1)
;       Leave this value blank or commented out if there is no hashing.
;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[mysql_1]
label="Test MySQL Connection"
method="mysql"
db_host="localhost"
db_user="username"
db_pass="password"
database="databasename"
table="tablename"
username_column="Login"
password_column="Pass"
salt="Salt"
hash="sha1"
where=""


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Sample NATS authentication method
;
; In this sample, the system connects to a database in order to authenticate this user.
; This may be used in the case of a NATS database that is authenticating the user.
;
; label: The name of the autentication method you're using.
; method: The type of method you're using. In this case, there is support for "nats", "mysql" and "passfile"
;
; db_host: The hostname of the MySQL server.
; db_user: The username to the MySQL database
; db_pass: The password to the MySQL database
; database: The MySQL database name that contains the user table information
; siteid: The system will need to know which site id the site applies to. You may find this under your NATS admin panel.
;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[nats_1]
label="Test NATS Connection"
method="nats"
db_host="localhost"
db_user="username"
db_pass="password"
database="databasename"
siteid=0


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;
; Pro protection settings
; Anything below these lines are available in the paid verison of this product (once available)
;
;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;



;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Notifications [pro protection only]
; Receive email notifications when a user has been banned, or an IP has been banned
; notify_email: The email address that gets notified
; notify_type: The type of notification which the
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[notifications]
;notify_email="email@address.com"
;notify_type="ban_user,ban_ip"


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Ban settings (Pro protection only)
;
; These settings aren't available within the simple protection script,
; but should be present within the pro version.
;
; [temporary_ban_user]
; Settings that determine when to ban a username.
;
; number_ips: If more than this number of IPs logged in as the same user, a temporary ban is done.
; number_minutes: If more than [number_ips] is logged in within this number of minutes, a temporary ban is done.
; ban_length: Length of temporary ban (in minutes)
;
; [temporary_ban_ip]
; Settings that determine when to ban an IP
;
; number_attempts: Number of failed attempts via the same IP address
; number_minutes: Number of minutes back to check IPs
; ban_length: Length of temporary ban (in minutes)
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[temporary_ban_user]
;number_ips="5"
;number_ips_soft="2"
;number_minutes_soft="5"

;number_ips_hard="5"
;number_minutes_hard="30"

;ban_length="180"
;daily_cap = "150000000000"
;hourly_cap = "40000000000"
;cap_file_exclude="js,css"

[temporary_ban_ip]
;number_attempts="25"     			; Number of failed attempts via the same IP address
;number_minutes="5"      			; Number of minutes back to check IPs
;ban_length="180"           		; Length of temporary ban (in minutes)