FUDforum: comp.lang.php » Digest Authentication

Home » Imported messages » comp.lang.php » Digest Authentication

Show: Today's Messages :: Polls :: Message Navigator

Re: Digest Authentication [message #179869 is a reply to message #179865]

Fri, 14 December 2012 11:05

M. Strobel
Messages: 386
Registered: December 2011

Karma:

Senior Member

Am 14.12.2012 01:49, schrieb dhtmlkitchen(at)gmail(dot)com:
> Hi,
>
> I am trying to implement a password protected area of a site. I have never done this before.
>
> HTTP digest authentication seemed suitable for our low-level security requirements.
>
> Here is our PHP 5.3.6 configuration:
> http://thai-massage.com/phpinfo.php
>
> Here is the script I am using, from PHP.net:
> http://php.net/manual/en/features.http-auth.php#example-349
>
> The script is running here:
> http://thai-massage.com/dollar-school/PHP-PayPal-IPN-master/example/auth.ph p
>
> The login credentials are hard coded for sake of example. Eventually I want to get the password from a MySQL database.

General answer:

I would never code basic auth or digest auth in PHP. This is a feature that is
offered completely functional by the web server. I would use it to lock up test
systems, or for the "quick and dirty" protection of some areas, used by few people
(only me).

The regular case is a real PHP login, using a database for user credentials, and
session variables to store the login status.

/Str.

Report message to a moderator

[Message index]

		Digest Authentication By: dhtmlkitchen on Fri, 14 December 2012 00:49
		Re: Digest Authentication By: Jerry Stuckle on Fri, 14 December 2012 03:15
		Re: Digest Authentication By: Jerry Stuckle on Fri, 14 December 2012 03:31
		Re: Digest Authentication By: Jerry Stuckle on Fri, 14 December 2012 04:15
		Re: Digest Authentication By: dhtmlkitchen on Wed, 19 December 2012 01:55
		Re: Digest Authentication By: Jerry Stuckle on Wed, 19 December 2012 02:08
		Re: Digest Authentication By: dhtmlkitchen on Wed, 19 December 2012 17:40
		Re: Digest Authentication By: Jerry Stuckle on Wed, 19 December 2012 20:02
		Re: Digest Authentication By: dhtmlkitchen on Thu, 20 December 2012 04:59
		Re: Digest Authentication By: Jerry Stuckle on Thu, 20 December 2012 19:02
		Re: Digest Authentication By: Peter H. Coffin on Wed, 19 December 2012 20:30
		Re: Digest Authentication By: Twayne on Wed, 19 December 2012 22:26
		Re: Digest Authentication By: Scott Johnson on Thu, 20 December 2012 01:02
		Re: Digest Authentication By: Twayne on Fri, 21 December 2012 01:17
		Re: Digest Authentication By: Jerry Stuckle on Fri, 21 December 2012 04:10
		Re: Digest Authentication By: The Natural Philosoph on Fri, 21 December 2012 10:19
		Re: Digest Authentication By: M. Strobel on Thu, 20 December 2012 08:57
		Re: Digest Authentication By: Jerry Stuckle on Thu, 20 December 2012 19:06
		Re: Digest Authentication By: legalize+jeeves on Sat, 22 December 2012 19:15
		Re: Digest Authentication By: M. Strobel on Fri, 14 December 2012 11:05

Previous Topic:	Using echo to run separate PHP script from HTML
Next Topic:	simple dating site

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Jul 05 12:22:18 GMT 2024

Total time taken to generate the page: 0.04785 seconds