RavenPHPScripts - Home of RavenNuke76™

Configure NukeSentinel

Make sure that you have completed the Base RavenNuke76™ Configuration and the Forum Configuration before you do this step.

You now need to complete the NukeSentinel™ configuration.
By a default, I have set Nuke Sentinel™ to;

Next, goto Blocker Configuration and Review the settings for all the Blockers. Most have been preset but you should still review them all. Save these settings for each blocker type that you modify.

Now, you should be able to SAFELY activate the Admin Access Protection part of NukeSentinel™. Go back to the NukeSentinel™ Administration main panel. In the Administrative Settings section you should see a drop down box beside Admin Auth:. Hopefully you will see "Off", "Admin HTTPAuth", and "Admin CGIAuth". It's okay if "Admin CGIAuth" is NOT there. Simply click "Admin HTTPAuth" and save the settings.
If all is working for you, you will now be prompted with the standard Browser HTTP Authentication Pop Up. Type in your NS id/pass and it should then let you in. Assuming it does, Close all browser sessions that you might have open so we can REALLY test this. Open up a new, single browser session and type http://www.YOURDOMAIN.com or http://www.YOURDOMAIN.com/html and select GO or press enter. You should see your nuke site with the Welcome message. Next, type http://www.YOURDOMAIN.com/admin.php or http://www.YOURDOMAIN.com/html/admin.php and select GO or press enter. You should be prompted with the HTTP Authorization screen. Enter your NS id/pass and submit it. Assuming it works, you should now see the regular nuke Admin login screen. Enter your nuke admin id/pass and submit it. You should now see your nuke ACP.

If you do not have HTTP Auth and/or .htaccess, do not panic. Read on and hopefully it can all be explained.

There are 2 basic ways that PHP can be integrated into Apache. One is as an Apache module and the other is as a CGI program. If your host is running PHP as an Apache module, then you have the capability of using HTTP Authentication as a function of the browser and you do not even need .htaccess/.staccess. If, however, your host is running PHP as a CGI program, then we have to use the same HTTP Authentication but with a .htaccess and .staccess (a password file). As an Apache module you have more flexibility than as a CGI. There are pro's and con's to each but I will only address the impact as it relates to NukeSentinel™. The reason we introduced this scheme is to protect your admin.php file from being so easily cracked. It provides an extra layer of security to gain access to the standard phpnuke Admin Control Panel (ACP). There are other safe-guards built into NukeSentinel™ that protects admin.php, but this is a very nice and secure caveat.

Should you find yourself in the smaller group of users that require CGI Auth (as we call it), the following procedure will need to be done to use and activate CGI Auth (HTTP Authentication using .htaccess and .staccess).

That is the procedure. It sounds more complicated than what it is and I took the long way around hoping you'd understand it more clearly.



<<< Configure Base RavenNuke76™ nuke WYSIWYG Editor >>>