note 100396 added to features.http-auth

To force a logout with Basic Auth, you can change the Realm out from under them to a different Realm. This forces a new set of credentials for a new "Realm" on your server. You just need to track the Realm name with the user/pass and change it around to something new/random as they log in and out. I believe that this is the only 100% guaranteed way to get a logout in HTTP Basic Auth, and if it were part of the docs a whole lot of BAD user-contributed comments here could be deleted. ---- Server IP: 69.147.83.197 Probable Submitter: 75.34.27.170 ---- Manual Page -- http://www.php.net/manual/en/features.http-auth.php Edit -- https://master.php.net/note/edit/100396 Del: integrated -- https://master.php.net/note/delete/100396/integrated Del: useless -- https://master.php.net/note/delete/100396/useless Del: bad code -- https://master.php.net/note/delete/100396/bad+code Del: spam -- https://master.php.net/note/delete/100396/spam Del: non-english -- https://master.php.net/note/delete/100396/non-english Del: in docs -- https://master.php.net/note/delete/100396/in+docs Del: other reasons-- https://master.php.net/note/delete/100396 Reject -- https://master.php.net/note/reject/100396 Search -- https://master.php.net/manage/user-notes.php