hacking .htaccess/apache?

[Anon]

Hi.
I know that this is probably not the correct forum to ask this, but I figured that some of you have thought of this already.

My question is very simple: you all know of that auth screen that comes up when you use .htaccess; now, is there any way to add stuff to that screen? where does that screen come from?
I am using mod_auth_mysql to authenticate all the users in my intranet against a mysQL database, it works perfect now, but what if a user forgets his password? I'd like to have something in that login screen that would allow me to email them their password.

Any suggestion is highly appreciated.

Thanks.

[sridhar]

I don't think it is possible to add anything to the password auth screen. This screen is generated by the browser. The server sends an Auth request and the client browser creates this window to get the username and password and passes it back to the server.

perhaps I'm wrong, so please correct me if anyone else finds a solution

-sridhar

[Anon]

and what about the hacking .htaccess/apache ?!?!

cya

[brandonschnell]

hes talking about hacking in regards to creative useage of the .htaccess.

one way might be to use the apache option to override the default error pages (ie "ErrorDocument 401 /bad_password.php") and for an unauthorized user error refer the user to a php file to apply for access or be emailed a new password.

[Anon]

Hey, that really helped! Thanks for the suggestion and for clarifying the "hacking" concept to many users out there 🙂

[Anon]

ok, got it 🙂