Re: authentication

From: Date: Mon, 03 Feb 2003 20:06:41 +0000
Subject: Re: authentication
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-134173@lists.php.net to get a copy of this message
Chris, Exactly. I am relying on the webserver to provide the restrictions. Now my next question: what functions should I utilize or come close to to do it? There isnt any PHP pages directed towards teh directory itself. Its is just a hard link to the protected areas. Are there any functions that support it? Im googling now ;) Thanks for your answers in advanced and previously. Chris "Chris Shiflett" <shiflett@php.net> wrote in message news:20030203190047.9756.qmail@web14305.mail.yahoo.com... > --- Chris Winters <channel0_70@yahoo.com> wrote: > > So, if one was to protect a directory or folder, a > > regular dialog will appear for username and passcode > > prompt within the web browser. I was researching some > > variables that I came across which is called > > $PHP_AUTH_USER, $PHP_AUTH_PW, and $PHP_AUTH_TYPE. > > Yes, these variables deal with HTTP basic authentication. > > > I would like to by pass that by a user entering the > > username and passcode via HTML, instead of the dialog > > showing. > > In that case, you will want to do exactly as you say, > collect the username and password via an HTML form and > authenticate the credentials with PHP. It sounds like you > are currently relying on your Web server to provide the > access restrictions. > > So, you can either: > > 1. Keep HTTP basic authentication enabled in the Web server > for these directories and live with the behavior. > 2. Turn off HTTP basic authentication in the Web server and > write a login page in PHP. It is then up to you to control > access to whatever resources you want to protect, so this > will require a bit of work on your part. > > Hope that helps. > > Chris

« previous php.general (#134173) next »