PHP's HTTP Auth

Anon

I've got a directory on a site which is supposed to be password protected. I don't so much care about graphics and whatnot, as the files therein allow the administrators to add items to various databases (news, personal profile, etc.). So I used the standard PHP code for HTTP Authorization. Also, the usernames and passwords are drawn from a MySQL database, and I don't know a way to get .htaccess to do that.

Now, we switched webhosts recently, and things are working differently. The code I had threw up 500 Internal Errors. I circumvented that by changing Header("HTTP/1.0 401 Unauthorized") to Header("Status: 401 Unauthorized"). The authorization prompt now pops up.

However, no matter what is typed into the Username or Password fields, it doesn't seem to work. It just brings the prompt back up as if the wrong name/pass were entered.

Anyone have a potential solution for me? And please don't tell me that HTTP Auth hooks only work when PHP is installed as an Apache module. I know that, don't know if it was installed that way or not, and can't change it regardless. (: I'm just looking for some solution to this.

Thanks,
-IanW

Anon

I had the same problem as well..here is a little bit of the code I used...hope it helps.

<?php
if(!isset($PHP_AUTH_USER)) {
Header("WWW-Authenticate: Basic realm=\"Database Administration\"");
Header("HTTP/1.0 401 Unauthorized");
echo "You are not authorized for this security level!\n";
exit;
}
elseif ($PHP_AUTH_USER && $PHP_AUTH_PW)
{
If (!$conn = mysql_connect($dbHost,$dbUser,$dbPass))
{
echo "Could not connect to server";
exit();
}

  If (!$db = mysql_select_db($dbName))
  {
  	echo "Could not select database";
	exit();
  }

  $sql = "select * from admin where username='$PHP_AUTH_USER'";

  If (!$result = mysql_query($sql))
  {
  	echo "Could not query database";
	exit();
  }
  $row = mysql_fetch_array($result);
  $pageauth = $row["username"];
  $password = $row["password"];

  If (($password == $PHP_AUTH_PW) && ($pageauth))
  {

?>
....stuff you want secured...
<?
}
else
{
Header("WWW-Authenticate: Basic realm=\"Database Administration\"");
Header("HTTP/1.0 401 Unauthorized");
echo "You are not authorized for this security level 5!\n";
echo $sql;
exit;
}

}
else
{
Header("WWW-Authenticate: Basic realm=\"Database Administration\"");
Header("HTTP/1.0 401 Unauthorized");
echo "You are not authorized for this security level 1!\n";
echo $sql;
exit;
}