Re: [PHP3] RE: [PHP-GENERAL] *Serious* problems with HTTP_AUTH (and PHP?)

Maybe instead of using a whole timestamp you could use say date("H"); that way it would not need to reauthorize from page to page until the hour changed and if a user closed a browser for an hour the realm would be different. Rossi Designs PO Box 1084 Holly Hill, FL 32125-1084 Phone : (904) 226-8979 URL : http://rossidesigns.net ----- Original Message ----- From: Boget, Chris <chris@wild.net> To: 'Paul Burney' <burney@gseis.ucla.edu>; <php-general@lists.php.net>; Php3 (E-mail) <php3@lists.php.net> Sent: Monday, June 12, 2000 3:47 PM Subject: [PHP3] RE: [PHP-GENERAL] *Serious* problems with HTTP_AUTH (and PHP?) | > Most (all?) browsers cache the username and password. Most | > of them also remove them when the user quits the browser. | > Some (IE for the Mac, for example, maybe IE for the PC), keep | > the auth information between quits. | > Usually not for more than a day, as far as I can tell. | > I don't believe that this caching is the same as the regular web page | > caching, so I don't think the pragma headers will help. | | One other thing that I forgot to mention in my initial email: | This problem occurs only on those machines that have the | option: | | Tools->Internet Options->Temporary Internet Files:Settings | ->Check for newer versions of stored pages | | set to anything other than "Every visit to the page". While this | is easy to change, it is not the default setting and so cannot be | relied upon (not that this should be the reliable solution). | | Chris | | -- | PHP 3 Mailing List <http://www.php.net/> | To unsubscribe, send an empty message to php3-unsubscribe@lists.php.net | To subscribe to the digest, e-mail: php3-digest-subscribe@lists.php.net | To search the mailing list archive, go to: http://www.php.net/mailsearch.php3 | To contact the list administrators, e-mail: php-list-admin@lists.php.net | | |