Authentication doesn't work!

spstieng

I'm using this forum a lot - but I guess that's what it is here for :-D

I've looked at the examples in the manual, examples from forums and examples from downlaoded source code.

But no matter what I do, it dose not work. Have tried several different scripts. This I guess is the most basic one, and I don't think I have any syntax faults... none that I can see.

<?
if(!isset($PHP_AUTH_USER)) 
{
    header('WWW-Authenticate: Basic realm="Spoono Password."');
    header('HTTP/1.0 401 Unauthorized');
    exit;
}
else if(($PHP_AUTH_USER=="Fuu") && ($PHP_AUTH_PW=="bar"))
{
    echo "Correct usr name and psw";
}
else
{
    echo "<html><body bgcolor=ffffcc>Incorrect login!";
}
?>

I get the follwing error message:
Parse error: parse error, unexpected T_STRING in D:\Web\MrMustard\test.php on line 6

Line 6 is: header('HTTP/1.0 401 Unauthorized');_

And I don't see anything wrong there..... 😕

lanjoky

Possibly dumb question but do you have global variables turned on in your php.ini??

Mordecai

Do you have any whitespace or text outside of the PHP code? Your code is fine (I've even tested it). Whitespace can be tabs, spaces, or hard returns (\n,\r, \r\n).

Mordecai

Originally posted by lanjoky
Possibly dumb question but do you have global variables turned on in your php.ini??

Does it even effect PHP_AUTH_*? I'm not sure since there is no other variable (to my knowledge) that handles this.

lanjoky

Originally posted by Mordecai
Does it even effect PHP_AUTH_*? I'm not sure since there is no other variable (to my knowledge) that handles this.

Not sure, but I've never ran a script using PHP_AUTH without it turned on ... But honestly dont know now that you ask 🙂

spstieng

register_globals = Off

OK - it was white spacing.
Can't see it in my editor, but something was there (I cut'n paste the script from web).

So now I got the more familiar error msg - the one I'm used to getting 🙁
ERROR MSG:

CGI Error
The specified CGI application misbehaved by not returning a complete set of HTTP headers. The headers it did return are:

Status: 401
Content-type: text/html
X-Powered-By: PHP/4.3.1
WWW-Authenticate: Basic realm="Spoono Password.-0"

laserlight

yes, the correct form is now $SERVER['PHP_AUTH_USER'] or $SERVER['PHP_AUTH_PW']

spstieng

I tried turning register_globals on/off. No effect.

Also tried: if ( !isset ( $_SERVER['PHP_AUTH_USER'] ) ), no effect.

I get the same CGI error message.

If I change values in the PHP.ini file - do I have to restart my IIS server?