Re: Auth vs .htaccess

Jonathan wrote:

Hello. Could somebody please explain how Auth and .htaccess compare for user authentication?? Which is more secure?? What are the advantages of Auth??

Auth and .htacess don't intervene at the same level in the process. .htaccess is locate at the Web Server level, and Auth is at the PHP script level. It means that an .htaccess solution is independent from the language you'll use underneath for your application. On the other side, it is tied up to the Apache Web server. The Pear::Auth solution works only with PHP, but it will permit more latitude in the way your application react to the success or the failure of the authentication.

Which is more secure??

The .htaccess is probably more secure because of the huge community who uses and maintains it. But it's behavior can be a bit too spartan for the end user in some situations. Personally, I haven't met any security problem with the Auth kernel. Now security could vary depending of the Auth 'Container' (Containers are drivers allowing to connect to various authentication sources). Regards, Hugues ---- Hugues Peeters phone : 32 (0) 10 47 85 48 e-mail : hugues.peeters@claroline.net

web    : http://www.claroline.net

----