Auth Help

[Anon]

I wrote a basic authorization script using $PHP_AUTH_USER and the auth pop-up. I want to add a logout button, the problem with that is that i don't know how to do so. The php manual says to send the browser a 401 error. i tried to do so by sending it through the header to no avail. can someone please show me the code to do so?

thank you in advance,
Loctan

[Anon]

the problem is with the 401 trick it prompts the users to logon again and most get confused by it. you could also advise that they close all browser windows but that idea has too many security issues (can't trust the users to close all windows).

if anyone else has a better idea i'd be interested in hearing it. for now the best way to handle logon/logout issues probably is with sessions and cookies.

brandon

[viking]

You can't explicitly log out a user, because HTTP is stateless, and there is no "logged in" session. The client browser sends the username and password in the headers for each request.