Re: WWW-authenticate

From: Date: Sat, 02 Dec 2000 06:09:04 +0000
Subject: Re: WWW-authenticate
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-28243@lists.php.net to get a copy of this message
How about giving a suggestion instead of criticism. Jay ----- Original Message ----- From: "indrek siitan" <tfr@cafe.ee> To: "Jason Lavigne" <jlavigne@stonecroft.net>; "Mike Mike" <hatchman2000@yahoo.com>; <php-general@lists.php.net> Sent: Friday, December 01, 2000 1:06 PM Subject: RE: [PHP] WWW-authenticate > Hi, > > >> > Redirect after login to this type of URL, > >> > >> http://username:password@yourdomain.com/secure_user_dir > > actually that's not such a brilliant idea, since the username/password > combination will be stored in the standard apache access_log, which > is in most standard installations readable by all users on that > machine. > > > Rgds, > Tfr > > --==< tfr@cafe.ee >==< http://tfr.cafe.ee/ > >==< +372-50-17621 >==-- >

« previous php.general (#28243) next »