note 74642 added to features.http-auth
| From: | php-general at lists dot php dot net | Date: | Sat, 21 Apr 2007 06:37:29 +0000 |
| Subject: | note 74642 added to features.http-auth | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-125731@lists.php.net to get a copy of this message | ||
I've a separate login file and use sessions to relogin the users. It works great!
When users browse to the login file after 60 seconds and they are no more logged in, they must
authenticate themselves again:
<?php
session_start();
$password = '6367c48dd193d56ea7b0baad25b19455e529f5ee'; //sha1-crypted: abc123
if($_SESSION['loggedin']) {
//User already logged in
header("location: ./index.php");
exit;
}
if( !isset($_SERVER['PHP_AUTH_USER']) || $_SESSION['timestamp'] < time() - 60
) {
$_SESSION['timestamp'] = time();
Header("WWW-Authenticate: Basic realm=\"Admin panel\"");
Header("HTTP/1.0 401 Unauthorized");
echo "Access denied!";
exit;
}
//Set logged in
$_SESSION['loggedin'] = true;
header("location: ./index.php");
exit;
?>
----
Server IP: 217.160.72.57
Probable Submitter: 91.22.248.254
----
Manual Page -- http://www.php.net/manual/en/features.http-auth.php
Edit -- https://master.php.net/note/edit/74642
Del: integrated -- https://master.php.net/note/delete/74642/integrated
Del: useless -- https://master.php.net/note/delete/74642/useless
Del: bad code -- https://master.php.net/note/delete/74642/bad+code
Del: spam -- https://master.php.net/note/delete/74642/spam
Del: non-english -- https://master.php.net/note/delete/74642/non-english
Del: in docs -- https://master.php.net/note/delete/74642/in+docs
Del: other reasons-- https://master.php.net/note/delete/74642
Reject -- https://master.php.net/note/reject/74642
Search -- https://master.php.net/manage/user-notes.php