note 11612 deleted from features.http-auth by irc-html
| From: | irc-html@php.net | Date: | Sat, 19 Jan 2002 20:28:50 +0000 |
| Subject: | note 11612 deleted from features.http-auth by irc-html | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-25315@lists.php.net to get a copy of this message | ||
Hi
someone on list gives this advice
<pre>
////////////////////////// USED FOR AUTHENTICATION
////////////////////////
function authenticate_user(){
Header("WWW-Authenticate: Basic realm=\"Restricted Admin
Area\"");
Header("HTTP/1.0 401 Unauthorized");
echo "You are not authorized to enter this section of the
site!\n";
exit;
}
if(!isset($PHP_AUTH_USER)) {
authenticate_user();
} else {
$sql = "SELECT * FROM admins WHERE
adminUsername='$PHP_AUTH_USER' && adminPassword='$PHP_AUTH_PW'";
$r = mysql_query($sql);
if(@mysql_num_rows($r) < 1){
authenticate_user();
}
}
////////////////////////// USED FOR AUTHENTICATION
////////////////////////
</pre>
unfortunately the sql-statement does not work because the password is encrypted in MySQL. So it
should be
$sql = "SELECT * FROM admins WHERE
adminUsername='$PHP_AUTH_USER' &&
adminPassword='PASSWORD($PHP_AUTH_PW)'";
Tom