ubuntu,debian,redhat -linuxany.com

<code>#!/usr/bin/php -q
&lt;?php
//连接MySQL数据库的设置
//MySQL服务器名，通常都是localhost
$servername = 'localhost'; 
//数据库用户名
$dbusername = 'dbusername';
//数据库用户密码
$dbpassword = 'dbpassword';
//数据库名
$dbname = 'dbname';
//存储认证帐号的数据表
$tablename = 'users';
//存储用户名的字段
$usercolumn = 'usercolumn';
//存储密码的字段
$pwdcolumn = 'pwdcolumn';//通过STDIN获取输入。STDIN是PHP命令行模式下的常量，相当于$stdin = fopen('php://stdin', 'r'); 
    while (STDIN){
        unset($link_id,$input,$username,$password,$input_array,$result,$fetch_array);
        //连接数据库并选择数据库，出错则输出ERR。
        if (!$link_id = mysql_connect($servername,$dbusername,$dbpassword)){
            print("ERR\n");
            exit();
        }
        if(!mysql_select_db($dbname,$link_id)){
            print("ERR\n");
            mysql_close($link_id);
            exit();
        }
        //获取输入。输入格式是 "用户名 密码"
        $input=fgets(STDIN,256);
        if ($input==""){
            $input_array[0]="";
            print("ERR\n");
        }else{
        //将输入分割为用户名和密码。我的算法显然是很笨的，Webmin的perl脚本（后面有）简直美妙啊，可惜不懂-_-!
            $input_array=split(" ",$input);
            $username=$input_array[0];
            if($username==""){
                print("ERR\n");
            }else{
                $input_array[0]="";
                $password=rtrim(ltrim(join(" ",$input_array)),"\n");
                if($password==""){
                    print("ERR\n");
                }else{
                //查询数据库，正确则输出OK，错误输出ERR
                    $password=encryptpwd($username,$password);
                    $query="SELECT * FROM ".$tablename." WHERE ".$usercolumn."='".$username."' AND ".$pwdcolumn."='".$password."' AND active='1'";
                    $result=mysql_query($query,$link_id);
                    if ($result){
                        $num_rows=mysql_num_rows($result);
                        if ($num_rows==1){
                            print("OK\n");
                        }else{
                            print("ERR\n");
                        }
                    }else{
                        print("ERR\n");
                    }
                    mysql_free_result($result);
                }
            }
        }
        mysql_close($link_id);
    }

function encryptpwd($username,$password){
//密码加密函数
$mode=1;
    switch ($mode) {
        case 0:
        $salt=$username;
            //$salt = substr(time(), -2);
            $encrypted=crypt($password,$salt);
            break;
        case 1:
            $encrypted=md5($password);
            break;
        case 2:
            $encrypted=base64_encode(md5($password));
            $encrypted="$$encrypted$";
            break;
    } 
    return $encrypted;
}
?&gt;

</code>

#chmod 755 /etc/squid/php_auth.php

CREATE TABLE `users` (
  `uid` int(11) NOT NULL auto_increment,
  `usercolumn` varchar(16) NOT NULL default '',
  `pwdcolumn` varchar(64) NOT NULL default '',
  PRIMARY KEY  (`uid`)
) TYPE=MyISAM ;INSERT INTO `users` VALUES ('','001', MD5('001'));

#/etc/squid/php_auth.php  回车后会等待输入

001 001 用空格分隔用户名和密码，回车

auth_param basic realm Squid proxy server  #会在验证窗口显示哦
auth_param basic program /etc/squid/php_auth.php #外部认证程序
auth_param basic credentialsttl 2 hour #验证信任时间（大概是这样吧），过了这个时间就会重新要求验证
auth_param basic children 5 #客户验证程序数目#acl设置
acl auth proxy_auth REQUIRED #要求访问验证

#代理约束规则
#http_access deny !auth #没验证的没得看哦
http_access allow auth  #验证的pass pass啦

#!/usr/bin/perl
# squid-auth.pl
# A basic squid authentication programopen(AUTH, $ARGV[0]);
while(&lt;AUTH&gt;) {
        s/\r|\n//g;
        s/#.*$//;
        if (/^(\S+):(\S+)/) {
                $auth{$1} = $2;
                }
        }
close(AUTH);

$| = 1;
while(&lt;STDIN&gt;) {
        s/\r|\n//g;
        local ($u, $p) = split(/\s+/, $_);
        print $auth{$u} &amp;&amp;
              $auth{$u} eq crypt($p, $auth{$u}) ? "OK\n" : "ERR\n";
        }

#squid -f -k reconfigure

<code>exec("squid -k reconfigure"); 
</code>

User www-data

User proxy