<?php 
function generate_salt($len) { 
  $randset = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'; 
  $randset .= './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'; 
  $salt = ""; 
  for ($i=0;$i<$len;$i++) { 
    $choice = rand(0,strlen($randset)-1); 
    $salt .= (substr($randset,$choice,1)); 
  } 
  return $salt; 
}

function encrypt_password_for_apache($plain,$ptype) { 
/* 
  adapted from: 
  http://www.student.oulu.fi/~samiantt/scripts/authuser.php 
*/ 
  switch ($ptype) { 
    case "SHA": // 
      return '{SHA}' . base64_encode(pack('H*', sha1($plain))); 
      break; 
    case "MD5": 
      $salt = generate_salt(8); 
      $length = strlen($plain); 
      $context = $plain . '$apr1$' . $salt; 
      $binary = pack('H32', md5($plain . $salt . $plain)); 
      for($i = $length; $i > 0; $i -= 16) { 
        $context .= substr($binary, 0, min(16, $i)); 
      } 
      for($i = $length; $i > 0; $i >>= 1) { 
        $context .= ($i & 1) ? chr(0) : $plain{0}; 
      } 
      $binary = pack('H32', md5($context)); 
      for($i = 0; $i < 1000; $i++) { 
        $new = ($i & 1) ? $plain : $binary; 
        if ($i % 3) $new .= $salt; 
        if ($i % 7) $new .= $plain; 
        $new .= ($i & 1) ? $binary : $plain; 
        $binary = pack('H32', md5($new)); 
      } 
      $q = ''; 
      for ($i = 0; $i < 5; $i++) { 
        $k = $i + 6; 
        $j = $i + 12; 
        if ($j == 16) $j = 5; 
        $q = $binary{$i} . $binary{$k} . $binary{$j} . $q; 
      } 
     $q = chr(0) . chr(0) . $binary{11} . $q; 
     $q = strtr(strrev(substr(base64_encode($q), 2)), 
                'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/', 
                './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'); 
     return "\$apr1\$$salt\$$q"; 
     break; 
   default: 
     return crypt($plain, generate_salt(2)); 
     break; 
  } 
}
//Appel de la fonction avec le mot de passe 'bikette71'
$plain2=encrypt_password_for_apache("bikette71","MD5");
echo $plain2;
?>

Though htpasswd will support creation on all platforms, the httpd daemon will only accept plain text passwords on Windows, Netware and TPF.

If executed on a Windows system, the password will be encrypted using the modified Apache MD5 algorithm; otherwise, the system's crypt() routine will be used. If the file does not exist, htpasswd will do nothing except return an error.

-m
Use MD5 encryption for passwords. On Windows, Netware and TPF, this is the default.
-d
Use crypt() encryption for passwords. The default on all platforms but Windows, Netware and TPF. Though possibly supported by htpasswd on all platforms, it is not supported by the httpd server on Windows, Netware and TPF.

... Tous les pseudo:mdp que tu donnes là-haut fonctionnent chez moi. ...

Loaded Modules : core mod_win32 mpm_winnt http_core mod_so mod_access mod_actions mod_alias mod_asis mod_auth mod_autoindex mod_cgi mod_dir mod_env mod_imap mod_include mod_isapi mod_log_config mod_mime mod_negotiation mod_rewrite mod_setenvif mod_userdir mod_php5

htpasswd encrypts passwords using either a version of MD5
modified for Apache, or the system's crypt() routine. Files
managed by htpasswd may contain both types of passwords;
some user records may have MD5-encrypted passwords while
others in the same file may have passwords encrypted with
crypt().

Standard DES
Cyrano:beeoPwPUZdxNk
crypt md5
Cyrano:$1$BA..095.$xFU1STOGZFyg.gNt4r26R0
crypt md5 et salt perso
Cyrano:$1$bergerac$ksQ2280tsfI/LDNdQ.WRi.

Cyrano:$apr1$JA2.....$tpjb8Ux.0Owqz9djjH4tX0

Ça ne fonctionne dans aucun cas de figure : les seuls qui fonctionnent pour le moment, ce sont les mots de passes en clair ou ceux cryptés avec l'utilitaire htpasswd.exe en ligne de commande.

// pour générer un mot de passe .htaccess
$user = isset($_POST['user']) ? trim($_POST['user']) : null;
$pass = isset($_POST['pass']) ? trim($_POST['pass']) : null;
$salt = isset($_POST['salt']) ? trim($_POST['salt']) : null;

$salt = substr($salt, 0, CRYPT_SALT_LENGTH );

echo '<form name="form1" method="post" action="'.$_SERVER['PHP_SELF'].'">';
echo '<input name="user" type="text" size="20" value="'.$user.'">';
echo '<input name="pass" type="text" size="20" value="'.$pass.'"><br />';
echo '<input name="salt" type="text" size="20" value="'.$salt.'"> (pour md5 salt perso)<br />';
echo '<input type="submit" name="Submit" value="Confirmer"></form>';

if (CRYPT_STD_DES == 1) {
   echo '<b>Standard DES</b><br />'.$user.':'.crypt($pass, $salt).'<br />';
}

if (CRYPT_EXT_DES == 1) {
   echo '<b>Extended DES</b><br />'.$user.':'.crypt($pass, $salt).'<br />';
}

if (CRYPT_MD5 == 1) {
   echo '<b>crypt md5</b><br />'.$user.':'.crypt($pass).'<br />';
   echo '<b>crypt md5 et salt perso</b><br />'.$user.':'.crypt($pass, '$1$'.$salt.'$').'<br />';
}

Le problème, c'est que quand je m'identifie, on ne me demande qu'un pseudo et un mot de passe, rien d'autre : si j'utilise un grain de sel pour crypter, comment est-ce que je dois faire pour le paramétrer dans mon .htaccess pour que la vérification utilise le même ? C'est en fait surtout ça que je cherche.

À moins que.... faut que je fasse un autre test...