login and password check

[Jyotsna]

When I go the page, it asks for a password and login. How can I catch these two items into variables to check them?

[stolzyboy]

is this a php login script, or are you trying to grab it from a popped .htaccess box, etc....more information needed before anyone can give you a decent answer

[Jyotsna]

I am trying to grab it from a .htaccess box
I am able to access the page actually, but I get some notices on the used $REMOTE_USER and $PHP_SELF

Notice: Undefined variable: PHP_SELF in C:\WebPub[url]www.upt.pt\www\htdocs\admin\check.php[/url] on line 4

Notice: Undefined variable: REMOTE_USER in C:\WebPub[url]www.upt.pt\www\htdocs\admin\check.php[/url] on line 4

[stolzyboy]

or try something like this:

Username: <? echo $_SERVER['PHP_AUTH_USER']; ?><br>
Password: <? echo $_SERVER['PHP_AUTH_PW']; ?>

[stolzyboy]

can you post the code that is generating your errors also

[m_tt]

Originally posted by Jyotsna
I am trying to grab it from a .htaccess box
I am able to access the page actually, but I get some notices on the used $REMOTE_USER and $PHP_SELF

Notice: Undefined variable: PHP_SELF in C:\WebPub[url]www.upt.pt\www\htdocs\admin\check.php[/url] on line 4

Notice: Undefined variable: REMOTE_USER in C:\WebPub[url]www.upt.pt\www\htdocs\admin\check.php[/url] on line 4

Chances are you have register_globals off.. try the following:

Either:

@ini_set('register_globals', 'On');

OR:

$_SERVER['PHP_SELF'];

OR:

$GLOBALS['PHP_SELF'];

[stolzyboy]

you CAN'T set register_globals = On at runtime according to php.net below

Please note that register_globals cannot be set at runtime (ini_set()). Although, you can use .htaccess if your host allows it as described above. An example .htaccess entry: php_flag register_globals on.

and btw, you can get always extract your vars like:

extract($_POST);

or

extract($_GET);

[m_tt]

From my experience it can be set using ini_set.. go figure..

[stolzyboy]

well that is straight from the manual, it allows you to use ini_set, but it most likely isn't actually doing anything, unless you could use it in older versions of php, but then you probably wouldn't have had to use it in older ones, since register_globals was on by default

[Jyotsna]

This is the code that generates the errors:

include("../mysql.uportu.inc");
//name_admin, file_admin, data_admin
$sql="SELECT * FROM admin_files WHERE (file_admin = '".basename($PHP_SELF)."' OR file_admin = 'all') AND name_admin = '".$REMOTE_USER."'";
if ($result=mysql_query($sql)){
	if ($row=mysql_fetch_array($result)){
		if ($row['file_admin']!="all"){
			if ($row['file_admin']!=basename($PHP_SELF)){
			 include ("acesso.php");
			 exit;
			}
		}
	}else {
		include ("acesso.php");
		exit;
	}
 }else {
	include ("acesso.php");
	exit;
 }

[stolzyboy]

what version of php are you using, you may be having a register_globals problem

[Jyotsna]

I am using version 4.3.0 of PHP on a Windows 2000 Server platform using IIS

[stolzyboy]

try

$_SERVER['PHP_SELF']

and

$_SERVER['REMOTE_USER'];

instead of

$PHP_SELF

or

$REMOTE_USER

[Jyotsna]

tried it already..doesn't work either :-(
Then I get the the "undefined index" notice

[stolzyboy]

but if you want what a person it putting into an htaccess box, you may want to use what i told you to further up in the thread

[Jyotsna]

I already tried everything you told me before...