Re: How to keep unauthorized viewers out

Nathan, Thanks for your reply ... At 04:53 PM 01/16/2001 -0700, Nathan Cook wrote:

how do they authenticate? VIA http or a subsequent page?

HTTP authentication,using Header("WWW-authenticate: basic realm=\"Business Today\"")

Whichever it is, there are variables associated with each check for those variables before loading.

Yes I'm using $PHP_AUTH_USER and $PHP_AUTH_PW. But I can only check for those within a script, not in a straight HTML page. (Although I suppose I could change all the page extensions to .php and put a check for these var's at the very top and redirect to the login script if they are not present.) Alternately, I suppose I could create a session ID, following a successful login. I really don't want to invoke .htaccess. Miles

-----------------------------------------------------------------------

.:: Nathan Cook                            - Network/Security Admin
office:  208.343.3110                   - Web Programmer
email:   ncook@pcsedu.com         - Qmail Admin
pager:  208.387.9983                   - MIS Admin

----------------------------------------------------------------------- ----- Original Message ----- From: "Miles Thompson" <milesthompson@sprint.ca> To: <php-general@lists.php.net> Sent: Tuesday, January 16, 2001 4:49 PM Subject: [PHP] How to keep unauthorized viewers out I'm using a pretty simple linking system for a subscription-based newsletter site. Stories and articles are in straight html files, reached by links from the front page. Clicking on a link passes a story number. So the second story on the index page would have this link: <A HREF="./story.php?storynum=2"> and story.php consists of just these lines: <? include "auth.inc" ; include "header.inc" ; include $storynum.".htm" ; include "footer.inc" ; ?> If someone comes in the "right way", through the index page, they will have to be authenticated, then the header, article and page footer are displayed. There's nothing, however, to stop someone from typing an URL like this: http://www.somepub.ca/2.htm and seeing the article. I assume they could also come in that way via a search engine. Any suggestions on how to stop that? Resources I should look at? I do want to keep the stories in straight html as the editor is struggling now with basic layout, etc. Regards - Miles Thompson -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net