Members area popup

[filburt1]

Today at 04:34 PM MUG said this in Post #9
$_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW']

Important to note that $_SERVER['PHP_AUTH_PW'] is the unhashed/unencrypted/plain text version of the password, so obviously never display it on a page.

[Dean C]

HTTP authentication eh ...

[Dean C]

Ok i did a little research into this earlier today using the functions given on php.net...

It's very odd i must say...

For starters you're not comparing usernames from anywhere and seeing if the login is correct. I simply put anything in the box and it works...

Am i missing something here ?

- miSt

[MUG]

Here is a very simple example that doesn't check anything against a database.

PHP Code:

if(ini_get('register_globals') == false) {
  extract($HTTP_SERVER_VARS);
}

if(!isset($PHP_AUTH_USER, $PHP_AUTH_PW) or $PHP_AUTH_USER != 'username' or $PHP_AUTH_PW != 'seekrit') {
  header("HTTP/1.0 401 Authorization Required");
  header('WWW-Authenticate: Basic realm="please login"');
  die('You entered an incorrect username/password combination.');
} 


Username/User ID is 'username'
Password is 'seekrit'

[Dean C]

Ok that works pretty well.. i'm pretty sure i can modify that myself to work with a user database... however where do i change the code so for example it does something when its logged in...

I.e. displays a message "You are logged in" if the authentication works

- miSt

[MUG]

Today at 08:08 AM Mist said this in Post #15
Ok that works pretty well.. i'm pretty sure i can modify that myself to work with a user database... however where do i change the code so for example it does something when its logged in...

I.e. displays a message "You are logged in" if the authentication works

- miSt

PHP Code:

if(ini_get('register_globals') == false) {
  extract($HTTP_SERVER_VARS);
}

if(!isset($PHP_AUTH_USER, $PHP_AUTH_PW) or $PHP_AUTH_USER != 'username' or $PHP_AUTH_PW != 'seekrit') {
  header("HTTP/1.0 401 Authorization Required");
  header('WWW-Authenticate: Basic realm="please login"');
  die('You entered an incorrect username/password combination.');
}

echo "You are logged in.";