First, I cannot change the apache configuration, so I cannot play around with mod_auth.

Second, why write a daemon if you already have them: ftp, telnet, rlogin, etc... .

I know what I am doing. My code is quite secure and well tainted.
Is there less harm in finding out passwords of Mysql, htpasswd etc, than there is of system accounts? It all depends on the setup and what you want to do.
---------------------------
Dr. Mark Ceulemans
Senior Consultant
IT Masters, Belgium