Members area popup

[TECK]

Every time you access the members area, a popup window will show, asking you to enter the license number and pass:
"vBulletin Members Area: Please enter your customer number (username) and password:"

I would like to know what is the code used. Thanks.

[Regs]

Isn't that just a plain .htaccess popup?

~Regs.

[Serge]

PHP has a function for this as well. You use the header() thing hold on I think I saw a function to do this.

Here is what you could put at the top of your webpage:

PHP Code:

if (empty($PHP_AUTH_USER))
{
    authenticate($realm,$errmsg,"header");
}
else
{
    $query = "SELECT username FROM author WHERE password = md5(lower('$PHP_AUTH_PW')) and username = lower('$PHP_AUTH_USER')";
    $result = mysql_query($query);
    if ($result)
    {
        list($valid_user) = mysql_fetch_row($result);
    }
    if (!$result || empty($valid_user))
    {
        authenticate($realm, $errmsg, "query");
    }
} 


The authenticate function would look something like this:

PHP Code:

function authenticate ($realm="Secure Area"
    ,$errmsg="Please enter a username and password"
)
{
    Header("WWW-Authenticate: Basic realm=\"$realm\"");
    Header("HTTP/1.0 401 Unauthorized");
    die($errmsg);
} 


[TECK]

Thanks. That's what I needed.

[Dean C]

Where does it get the username and password from?

[Boofo]

You have to manually enter it.

[Dean C]

Hmmm. But i mean how does it compare the password entered in this pop-up to another one to see if its correct?

- miSt

[filburt1]

Search around on php.net for HTTP authentication. They give an example there. I also used it a year ago in a project at work where it used a MySQL database and it worked nicely (no cookies, too).

[MUG]

Today at 03:21 PM Mist said this in Post #7
Hmmm. But i mean how does it compare the password entered in this pop-up to another one to see if its correct?

- miSt

$_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW']

[Serge]

Yesterday at 08:21 PM Mist said this in Post #7
Hmmm. But i mean how does it compare the password entered in this pop-up to another one to see if its correct?

- miSt

Yes I was going to stay look at the query again it has the password listed in there. Also I don't know if I did it up there but you could md5 the password as well if you have md5 protection on your passwords.