// squid proxy · access control

Squid Proxy User Console

A PHP/MySQL web console that lets a business owner provision, tier, and expire Squid proxy logins, bulk-import an existing user base, and manage a site blacklist — without ever touching a terminal.

Engineered with

JavaScript

HTML5

CSS3

PHP5.x

MySQL5.02007

Open live

Screenshots

Overview

This project is a lightweight internal web console built to put Squid proxy administration in the hands of a non-technical business owner. Before this tool, managing who could use the company's internet connection meant SSH-ing into the proxy server and hand-editing htpasswd files and Squid ACL text files for every new employee, every access change, and every site to block.

The console organizes proxy users into three access tiers — Restrito (restricted), Pleno (full), and Master (administrative) — each backed by its own Squid ACL file, with per-user expiration dates so temporary or contractor access lapses automatically instead of lingering as a security risk. Saving a user from the form transparently shells out to htpasswd and triggers squid -k reconfigure, so changes take effect on the live proxy immediately.

For the initial rollout, a bulk-import screen accepts the business's existing system passwd file and assigns an access tier to the whole batch at once, avoiding a manual re-entry of every existing account. A blacklist editor exposes Squid's site-blocking ACL as a simple textarea, and an embedded SARG report view gives the owner direct visibility into who is using how much bandwidth — turning a server the business depended on, but couldn't see into, into something they could actually manage day to day.

Highlights

Self-service provisioning console

a browser console letting non-technical staff create three tiers of proxy access (Restrito/Pleno/Master) with automatic expiration dates, while the backend runs htpasswd and squid -k reconfigure directly — removing IT's need to SSH into the proxy server for every new hire or contractor

Bulk user import

a tool that ingests an existing system passwd file and assigns access tiers in one pass, letting the client onboard its entire existing employee base in minutes instead of re-keying every account by hand

In-console usage reporting

embedded SARG traffic reports alongside a blacklist editor, giving the business owner visibility into internet usage and the ability to block distracting or inappropriate sites without opening a terminal