note 76074 deleted from features.http-auth by nlopess
| From: | nlopess@php.net | Date: | Fri, 29 Jun 2007 09:09:59 +0000 |
| Subject: | note 76074 deleted from features.http-auth by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-128074@lists.php.net to get a copy of this message | ||
Note Submitter: Robert Chapin
----
Readers of Example 34.2 above should use extreme caution. The comment "// ok, valid username
& password" is inappropriate in this example because the A1 hash is wrong, and the password
is never tested. The Example is designed to authenticate any case where username == password, in
other words, guest/nopass.
Robert Chapin
Chapin Information Services, Inc.