login problem

[leena]

Hi everone,

I don't know why this is happening because it did not happen before, but here's my problem:

Once you click a button, it takes you to a page that should ask for your username and password...

However it no longer even asks me for the password, it just acts as though there was not username or pasword entered, or that the username or password was wrong.

Here's my code:

if(!$PHP_AUTH_USER||!$PHP_AUTH_PW){
authenticate();
}
else{
// continue with program - get members info

}

function authenticate() { // it ends up going in here... although they didn't even ask for my username or password.
GLOBAL $leagueID;
Header("WWW-authenticate: basic realm=\"MEMBER LOGIN! PLEASE USE YOUR EMAIL ADDRESS FOR 'USERNAME'. Logout when finished");
Header("HTTP/1.0 401 Unauthorized");
echo "LeagueID: $leagueID";
echo "<BR><B><CENTER><FONT COLOR=RED>Logging Error!</FONT><BR><BR><FONT COLOR=GREEN> Please Click the ' Go Back ' button.<BR>\n";
print ("<form><input type=button onClick='history.back()' value = ' Go Back '></form>");

// require("../footer.php");
}//end function

Does anyone know what is wrong?
Any help is greatly appreciated.
Thanks for your time.

[daarius]

there are two possibilities:

1. you have upgraded your PHP from pre 4.2.0 to 4.2.0 or above. Doing this will result many changes needed in your code. The register globals are now turned off and many server variables are moved in $_SERVER.

so, the $HTTP_AUTH_USER|PW is now in $_SERVER['PHP_AUTH_USER']; so try changing this, it might work.

2. your PHP has been moved from Apache module to CGI executable. The CGI version does not support communicating with Apache, therefore no headers() will be sent to the browser.

[leena]

Hi,

I didn't upgrade php, but there was a patch applied. Do you think this would have affected it?

Do you have any other ideas why this could not be working? A similar login script is being used for another page and it seems to be working...

Thanks,
Lena

[leena]

I also heard that if you have anything before you include the login file, (even a carriage return) that it would give you an error?

Does anyone know about this??? Is there a way to get around it?

Thanks for your time!