note 11971 rejected and deleted from function.setcookie.php by jmcastagnetto
| From: | jmcastagnetto@php.net | Date: | Thu, 15 Mar 2001 21:34:02 +0000 |
| Subject: | note 11971 rejected and deleted from function.setcookie.php by jmcastagnetto | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-12448@lists.php.net to get a copy of this message | ||
Would it be possible for one to bypass the WWW-Authenticate Response from the server by setting a
cookie on the clients machine containing the PHP_AUTH_TYPE, PHP_AUTH_USER and PHP_AUTH_PW vars?
Thus allowing one to retrieve the UserID and password from the client using a normal html form, then
redirecting them to the secure area/page without that annoying pop-up box??? Any Suggestions?