note 13558 added to features.http-auth.php
| From: | scotts at geomagnet dot com | Date: | Thu, 21 Jun 2001 16:28:44 +0000 |
| Subject: | note 13558 added to features.http-auth.php | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-14530@lists.php.net to get a copy of this message | ||
My hat's off to Chris Minnoy! <br> How he
got:<br>-------------------------<br>
md5( md5("$username:$realm:$db_password").
":$db_nonce:$nc:$cnonce:$qop:".
md5("{$HTTP_SERVER_VARS['REQUEST_METHOD']}:{$HTTP_SERVER_VARS['REQUEST_URI']}"));<br>
<br>-----------------------------<br> out of RFC
2617:<br>---------------------------<br>
KD ( H(A1), unq(nonce-value) ":" nc-value
":" unq(cnonce-value)
":" unq(qop-value)
":" H(A2))
------------------------------------
Located at
ftp://ftp.isi.edu/in-notes/rfc2617.txt
...is a miracle.
Someday I'll learn how to read and understand
"Really F'n Cryptic" (RFC's). Nevertheless, Digest Authentication will work on
IE5 (haven't check NS).
http://www.php.net/manual/en/features.http-auth.php