Re: Basic Authentication

From: Date: Thu, 15 Jan 2009 17:32:29 +0000
Subject: Re: Basic Authentication
References: 1 2 3 4 5  Groups: php.general 
Request: Send a blank email to php-general+get-286437@lists.php.net to get a copy of this message
At 11:43 PM +0000 1/14/09, Ashley Sheridan wrote:
Surely that's a good thing then? Security through obscurity and all that... Ash
Ash: Certainly it's a good thing -- until the client asks for another password. At this point, I have four logon and password combinations to use. I can tell the client if they use one of those, then they can login. However if they want their own, then I have no idea of what the algorithm was/is and thus no way of generating a new combination for them. You see, the problem here is not that I can't set up an authorization scheme -- I can do that easily enough. The problem is that I don't know how the one currently in place on my client's server works in generating passwords. If I knew that, then I could generate the password myself. Cheers, tedd -- ------- http://sperling.com http://ancientstones.com http://earthstones.com

« previous php.general (#286437) next »