Page 1 of 1

htpasswd.exe broken in XAMPP 1.8.2-1

PostPosted: 31. July 2013 00:10
by bencollver
When I use XAMPP 1.8.2-1 htpasswd.exe interactively to set a password on an existing user, then I can no longer log in as that user. I can reproduce this on Windows XP SP3 and Windows Server 2003 R2 SP2. As a workaround, I can use the htpasswd.exe -b flag to set the password from the command line and it works as expected. I am using the new control panel.

Steps to reproduce:
  • I started with a fresh install of XAMPP 1.8.2-1 using install method B as described in the following link.
  • http://www.apachefriends.org/en/xampp-windows.html#521
  • I password-protected XAMPP with an .htaccess file as described in the following link.
  • http://www.apachefriends.org/en/xampp-windows.html#1221
  • I used zaphod as the username and justthisguy as the password.
  • I verified that I can log into http://127.0.0.1/xampp/
  • I opened a command prompt.
Code: Select all
C:\> cd \xampp
C:\xampp> type security\xampp.users
zaphod:$apr1$oX7iUOql$DjDw1ZCq0x.P8n3Nh54of1
C:\xampp> apache\bin\htpasswd.exe security\xampp.users zaphod
New password: ********
Re-type new password: ********
Updating password for user zaphod

  • I manually typed in the word ettinguy as the password.
  • To my surprise, I cannot log into http://127.0.0.1/xampp/ with zaphod as the username and ettinguy as the password.
  • I return to the command prompt.
Code: Select all
C:\xampp> apache\bin\htpasswd.exe -b security\xampp.users zaphod ettinguy

  • Now I can log into http://127.0.0.1/xampp/ with zaphod as the username and ettinguy as the password.
  • Note: If I extract XAMPP 1.8.1 to C:\xampp.bak\ then I can use C:\xampp.bak\apache\bin\htpasswd.exe to interactively set the password. This problem only happens with the newer htpasswd.exe

Re: htpasswd.exe broken in XAMPP 1.8.2-1

PostPosted: 03. September 2013 05:35
by Altrea
confirmed in XAMPP 1.8.2-0, XAMPP 1.8.2-1, XAMPP 1.8.2-2, XAMPP 1.8.3-0, XAMPP 1.8.3-1

It's a reported bug in Apache core
https://issues.apache.org/bugzilla/show ... i?id=54735

Thanks for pointing that out

Re: htpasswd.exe broken in XAMPP 1.8.2-1

PostPosted: 04. September 2013 10:09
by Beltran
Just checked htpasswd.exe from Apache 2.4.6 works properly. We will update Apache in the next XAMPP version.

Thanks for reporting it.