Improved password protection of website statistics.

Author: tbrehm

interface/web/sites/templates/web_domain_stats.htm

@@ -7,7 +7,7 @@ <h2><tmpl_var name="list_head_txt"></h2>
     <fieldset class="inlineLabels">
       <div class="ctrlHolder">
       	<label for="redirect_path">{tmpl_var name='stats_password_txt'}</label>
-        <input name="stats_password" id="stats_password" value="{tmpl_var name='stats_password'}" size="30" maxlength="255" type="text" class="textInput" />
+        <input name="stats_password" id="stats_password" value="{tmpl_var name='stats_password'}" size="30" maxlength="255" type="password" class="textInput" />
 	  </div>
     </fieldset>
 

server/plugins-available/apache2_plugin.inc.php

@@ -672,6 +672,7 @@ function update($event_name,$data) {
 
 		//* Create .htaccess and .htpasswd file for website statistics
 		if(!is_file($data["new"]["document_root"].'/web/stats/.htaccess')) {
+			if(!is_dir($data["new"]["document_root"].'/web/stats')) mkdir($data["new"]["document_root"].'/web/stats');
 			$ht_file = "AuthType Basic\nAuthName \"Members Only\"\nAuthUserFile ".$data["new"]["document_root"]."/.htpasswd_stats\n<limit GET PUT POST>\nrequire valid-user\n</limit>";
 			file_put_contents($data["new"]["document_root"].'/web/stats/.htaccess',$ht_file);
 			chmod($data["new"]["document_root"].'/web/stats/.htaccess',0664);