WWW-authenticate can't be called twice?

[Anon]

I have tested out a couple of scripts like the one presented by Brian Snipes which manage authentication by calling the www-authenticate header. Everthing goes smooth the first time through and through refreshes.

I cannot seem to find a way to logout and make the browser (IE5) re-authenticate. Unsetting $PHP_AUTH_USER is happening, but it seems as if the browser is ignoring the request for a new authentication. Only a new browser will behave properly.

Is this correct? And if so, is authentication by sessions the only fully-functional method?

TIA.

Mike

[Anon]

Have you found a solution to your problem? I am trying to unset($PHP_AUTH_USER) and PW but authentication will not work then.

Thanks,
Vinnie

Mike wrote:

I have tested out a couple of scripts like the one presented by Brian Snipes which manage authentication by calling the www-authenticate header. Everthing goes smooth the first time through and through refreshes.

I cannot seem to find a way to logout and make the browser (IE5) re-authenticate. Unsetting $PHP_AUTH_USER is happening, but it seems as if the browser is ignoring the request for a new authentication. Only a new browser will behave properly.

Is this correct? And if so, is authentication by sessions the only fully-functional method?

TIA.

Mike

[Anon]

I believe I found that this is a permanent problem and limitation of this method. I adopted a PHP session/cookie based authentication method that will even time out after a while. Search devshed.com. I (and yes I even posted a converted version to postgresql but it was some time ago) forgot the program name (and yes I even posted a converted version to postgresql but it was some time ago) , but there a system there which you can use.

Mike