[newbie] Based User Authentication

freekw

Hi,

I'm trying to find out how php works by trying some tutorials. But this script below won't work!

<?php
echo $_SERVER["PHP_AUTH_USER"];

if ( ( !isset( $PHP_AUTH_USER )) || (!isset($PHP_AUTH_PW))

|| ( $PHP_AUTH_USER != 'user' ) || ( $PHP_AUTH_PW != 'open' ) ) {

header( 'WWW-Authenticate: Basic realm="Private"' ); 
header( 'HTTP/1.0 401 Unauthorized' ); 
echo 'Authorization Required.'; 
exit;

} else {

echo 'Success!';

}
?>

When trying this script the login box that pops up does so 3 times (with
the correct password and username) before it echos the 'Authorisation Required' statement - not the 'Success!' statement.... whats going on?

I'm using OHTTPd (version 2.09) with
PHP 4.0.4pl1 (says phpinfo() ) on win ME.
I have the idea that this is very important! :-)

THX Freek

Anon

Have you check the value of
$PHP_AUTH_USER ? (I mean : after you
have anwsered the prompt) Is it
equal to 'user' ? The same
for the password ?

freekw

You mean between [
header ( 'WWW-Authenticate: Basic realm="Private"' );
header( 'HTTP/1.0 401 Unauthorized' ); ]
AND [echo 'Authorization Required.';] ??

thx

Anon

$_SERVER won't be on your system - it's new with PHP 4.1.0...

Aside from that, it works for me.
It won't if register_globals is turned off (see phpinfo()); in that case they're in $HTTP_SERVER_VARS['PHP_AUTH_USER'] and $HTTP_SERVER_VARS['PHP_AUTH_PW'].

freekw

i installed Php 4.1.1 on my system but it
still won't work if i use
$SERVER["PHP_AUTH_USER"] or $SERVER["PHP_AUTH_PW"] ??

I still haven't got a clue; somebody does?