note 11612 added to HTTP authentication with PHP
| From: | Thomas dot Schroeder at curry dot de | Date: | Tue, 27 Feb 2001 14:47:29 +0000 |
| Subject: | note 11612 added to HTTP authentication with PHP | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-11636@lists.php.net to get a copy of this message | ||
Hi
someone on list gives this advice
<pre>
////////////////////////// USED FOR AUTHENTICATION
////////////////////////
function authenticate_user(){
Header("WWW-Authenticate: Basic realm=\"Restricted Admin
Area\"");
Header("HTTP/1.0 401 Unauthorized");
echo "You are not authorized to enter this section of the
site!\n";
exit;
}
if(!isset($PHP_AUTH_USER)) {
authenticate_user();
} else {
$sql = "SELECT * FROM admins WHERE
adminUsername='$PHP_AUTH_USER' && adminPassword='$PHP_AUTH_PW'";
$r = mysql_query($sql);
if(@mysql_num_rows($r) < 1){
authenticate_user();
}
}
////////////////////////// USED FOR AUTHENTICATION
////////////////////////
</pre>
unfortunately the sql-statement does not work because the password is encrypted in MySQL. So it
should be
$sql = "SELECT * FROM admins WHERE
adminUsername='$PHP_AUTH_USER' &&
adminPassword='PASSWORD($PHP_AUTH_PW)'";
Tom
http://www.php.net/manual/en/features.http-auth.php