note 45245 deleted from features.http-auth by betz
| From: | betz@php.net | Date: | Tue, 31 Aug 2004 09:46:18 +0000 |
| Subject: | note 45245 deleted from features.http-auth by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-75726@lists.php.net to get a copy of this message | ||
Note Submitter: neo at darkxproz dot net
----
I found no good way than to post in the usual username:password@host format for HTTP Authentication
without using it in the URL. My clients see their password in the URL and for any other colleague to
see through while passing by. I can't insist to get the security update for each and every
client who is downloading my script. Is there way to send the usernames & password through POST
requests for HTTP Authentication? (That is, the user must not be prompted with a browser
Authentication Box but a custom form can post to a php script which can do this indirectly to the
HTTP Authentication page)
Thanks in Advance
Neo <neo@darkxproz.net>