RE: [PHP-DB] HTTP authentication
| From: | Beau Lebens | Date: | Mon, 21 Jan 2002 02:18:26 +0000 |
| Subject: | RE: [PHP-DB] HTTP authentication | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-16015@lists.php.net to get a copy of this message | ||
in that case, check the php manual under the section titled
Features -> HTTP Authentication With PHP
there is a nice example, which you should be able to modify to do things (i
have it working with pulling details from an XML file and then using them as
the required user/pass for authentication)
http://www.dentedreality.com.au/webpad/
if you download and install, then you need to use admin/admin as the
user/pass for the first time you modify the system settings. (it has zero
docuemntation so far :)
have fun
beau
// -----Original Message-----
// From: news.php.net [mailto:k.schaaps@chello.nl]
// Sent: Monday, 21 January 2002 10:17 AM
// To: php-db@lists.php.net
// Subject: Re: [PHP-DB] HTTP authentication
//
//
// Dear Beau,
//
// Thanks for your answer, and indeed.. it doesn't have too
// much to do with
// databases, although if an example of authentication using a
// database would
// be great.
//
// And I was a bit vague on which webserver (indeed Apache).
// And I do have
// command line access. However in my initial message I said
// that directory
// authentication (with .htaccess) doesn't work. And I've tried
// more than once
// to get it to work.
//
// So if you could still help me, or anyone else I would
// greatly appreciate it!
//
// Yours,
//
// Kevin
// "Beau Lebens" <B.Lebens@curtin.edu.au> wrote in message
// news:A2B098B4E624D511BED900508BB92A5701CA4DBA@exmsb02.curtin.
// edu.au...
// > not that this has anything to do with databases... ([php-db])
// >
// > assuming;
// > 1. you are using apache
// > 2. you have command-line access to your server
// > 3. your webhost has htaccess enabled and configured to use
// ".htaccess" as
// > the security file
// >
// > you should be able to drop a file called (usally)
// ".htaccess" into the
// > directory you want to secure. you then go to the command
// line and do
// > something like
// >
// > $ htpasswd -c "/home/you/htbin/.htpasswd" username
// >
// > which creates (-c) the password file
// (/home/you/htbin/.htpasswd) and adds
// a
// > user called "username" to it. when you hit enter it will ask for a
// password
// > (twice).
// >
// > now the .htaccess file which is in your "to-be-secured"
// directory needs to
// > look something like this;
// >
// > ==== snip
// > AuthUserFile /path/to/htpasswd/file
// > AuthName "Name to Appear in Box"
// > AuthType Basic
// >
// > <Limit GET POST>
// > require valid-user
// > </Limit>
// > ==== snip
// >
// > that example looks in "/path/to/htpasswd/file" and
// confirms that the
// > user/pass combintation is a "valid-user" (any valid combo
// from the file)
// and
// > if so, allows them access.
// >
// > you can get more information on all of this in the apache
// docuemntation at
// > apache.org, search for "htaccess" and you might also be
// interested in the
// > groups ability of the system, so search for "htgroup" (i think)
// >
// > hth
// >
// > beau
// >
// >
// > // -----Original Message-----
// > // From: news.php.net [mailto:k.schaaps@chello.nl]
// > // Sent: Monday, 21 January 2002 3:36 AM
// > // To: php-db@lists.php.net
// > // Subject: [PHP-DB] HTTP authentication
// > //
// > //
// > // Heya,
// > //
// > // I'm trying to find out how http header authentication works.
// > // For some reason
// > // my webserver won't do it on a directory basis. But the
// > // problem is that the
// > // documentation that came along with the PHP package doesn't
// > // help me much.
// > //
// > // Can you guys give me a working example on how to use and
// > // implement it?
// > //
// > // I would really appreciate it,
// > //
// > // Kevin
// > //
// > //
// > //
// > // --
// > // PHP Database Mailing List (http://www.php.net/)
// > // To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net
// > // For additional commands, e-mail: php-db-help@lists.php.net
// > // To contact the list administrators, e-mail:
// > // php-list-admin@lists.php.net
// > //
//
//
//
// --
// PHP Database Mailing List (http://www.php.net/)
// To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net
// For additional commands, e-mail: php-db-help@lists.php.net
// To contact the list administrators, e-mail:
// php-list-admin@lists.php.net
//