PHP authentication and apache authentica

Anon

Hello, i would like to enter in an apache protected directory using PHP.
I have a page in which the authenticacion is made with PHP using cookies, and i would like to use this data to athenticate the user in an apache protected directory without enter data twice.
Someone know how to make it?
Thanks.

Anon

You can use the header() to send the appropriate user id and passwd to the apache's .htaccess request.

Anon

It´s a good idea, but, how i can pass the user id and password?
I was looking for variables in apache to make it, but i don´t found it ...
Thanks for the help.

herve

I'm not sure to understand what you want to
do exactly :

there's a directory whithin a web server
protected by the .htaccess/.htpasswd Apache
authorisation scheme
you have a PHP program, and you want to get
an HTML page which is inside that protected
directory

Is that correct ?

Anon

Yes, and i do a user validation at the index page, but after, some user have their own apache protected directory, and i don´t want that they have to enter their username and password other time, so , i would like to pass the username and password to apache for not appear the menu box to enter in the protected directory ( looking before if the username and password are corrects 🙂.
I know i could do all with PHP, but it would implies to reprogram all site and it´s a very hard job, because the code is large O🙂

herve

I'm not sure if it's suitable for you,
but you can use the header() function,
like that : (a pseudo-redirection in fact)

header ("Location: $login:$password@www.myserver.com/$userdir")

syntax, but I'm not sure it will work with
MSIE, and also the login/password appear in the address bar

Anon

Yes, i have tried it and the username and password appears on the browser ...
About MSIE, it works.
Thanks for you help 🙂

herve

If you want you can "move away" the login/password in the address bar but issuing
an other redirection, that is :

in the index.phtml / index.php file
in the protected directory you refresh
quickly (< 1 s) the page (without the need
for the login/password since you are already authentifcated) with index2.phtml for instance

I have already done that, and it was nice
(sometime it was so quick, you can't even
detect it) I don't remember the syntax right now, but there's a way to redirect immedialty, without any delay