Re: LDAP and .htaccess

Bret Walker wrote: > Well, the download.php script would allow me to protect certian files, > but is there a way to protect all files? For example, images that I > would like to include in my php pages. you can serve images through through download.php.. but that's just a bad idea :) > Could I silently pass a username and password to htaccess? Can htaccess > be set to use a php script instead of a htpasswd file? why are your username/passwords safer in script.php then .htpasswd? I still think your best route would be auth_ldap. If you directory server doesn't allow anonymous searches, have the admin create a low privileged account that only has access to search the required attributes. Kenny