Re: Using PHP-based form authentication, circumventing existing Apache .htaccess "require valid-user"

From: Date: Sun, 23 Oct 2005 00:22:12 +0000
Subject: Re: Using PHP-based form authentication, circumventing existing Apache .htaccess "require valid-user"
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-224481@lists.php.net to get a copy of this message
You USED to be able to do that by putting http://username:password@example.com but then Microsoft, in its infinite wisdom, decided that was a "security risk" and stopped supporting it. AFAIK, there's no way to SET the USER/PASS from server to browser... Hmmmm. You could maybe use cURL to login, then pass back all the responses to the browser, and then the headers that make them be "logged in" would work for both your login and their .htaccess. The PHP Form and HTTP Auth part of all this for your first login is documented right in the manual, so you needn't strain your brain on that bit. -- Like Music? http://l-i-e.com/artists.htm

« previous php.general (#224481) next »