help with $PHP_AUTH_USER

[Anon]

I am trying to use PHP_AUTH_USER and PW for the first time and I cant seem to get it to work at all,

I tried to make a test php document to get it to work,

<?php

// File Name: auth01.php
// Check to see if $PHP_AUTH_USER already contains info

if (!isset($PHP_AUTH_USER)) {

	// If empty, send header causing dialog box to appear
	header('WWW-Authenticate: Basic realm="My Private Stuff"');
	header('HTTP/1.0 401 Unauthorized');
	echo 'Authorization Required.';
	exit;
}

	// If not empty, display values for variables

else {

	echo "
	<P>You have entered this username: $PHP_AUTH_USER<br>
	You have entered this password: $PHP_AUTH_PW<br>
	The authorization type is: $PHP_AUTH_TYPE</p>
	";

}

?

But i get errors like;

Warning: Cannot send session cookie - headers already sent by (output started at /home/sites/site3/web/test.php:1) in /home/sites/site3/web/test.php on line 1

Warning: Cannot send session cache limiter - headers already sent by (output started at /home/sites/site3/web/test.php:1) in /home/sites/site3/web/test.php on line 1

Warning: Cannot add header information - headers already sent by (output started at /home/sites/site3/web/test.php:1) in /home/sites/site3/web/test.php on line 1

Warning: Cannot add header information - headers already sent by (output started at /home/sites/site3/web/test.php:1) in /home/sites/site3/web/test.php on line 1
Authorization Required.

I tried thowing a session_start(); at the begining but that didnt work either,

I am using php4.0.1pl2

Thanks ofr any help;

jake

[Anon]

Not sure, but I think this is related to the version of PHP you are using: the cgi or the module. The cgi version (at least on PHP3) does not allow forcing http authentication; this is a feature of the module version. As to header() you must be absolutely sure that no output is sent before it gets called.

HTH

[Anon]

It is installed as a module with apache,

I thought it was supposed to work similar to a .htaccess but witht he ability to use a different sorts of files to compare users and passwords,

Here is the exact warning I get for that code,

Warning: Cannot add header information - headers already sent by (output started at /home/sites/site3/web/test.php:1) in /home/sites/site3/web/test.php on line 1

Warning: Cannot add header information - headers already sent by (output started at /home/sites/site3/web/test.php:1) in /home/sites/site3/web/test.php on line 1
Authorization Required.

[Anon]

Are you trying to use cookies as well as the authentication at the same time? It looks like information is being sent before you get to your header line. Is this page being included from within another file? If so, you may have problems. The header function often doesn't like to read anything before it, especially HTML code or other headers.

[Anon]

the problem is that your probably using IIS to host your PHP web page. And since php modules for MS IIS are only emulated by CGI,
variables like $PHP_AUTH_USER and $PHP_AUTH_PASS are not supported. I had the same troubles, use Apache sever instead and install the php modules on it, it's so much better.

h3