Password Authentication

[MagicMikey]

Hey, I'm using the following code in a page to password protect it. Through my eyes, the code is correct but when I type in the correct info in my browser's pop-up box, it doesn't seem to let me in. I type in the info three times before it echo's Authorization Required!.

The login and password are in the config.php file and I did double check to see if I'm typing in the right characters.

<?php 
include (dirname(__FILE__) . "/config.php");
func_mysqlconnect();

$auth = 0; 
if (($PHP_AUTH_USER == $login ) && ($PHP_AUTH_PW == $password )) $auth = 1; 
if ( $auth != 1 ) { 
    header( 'WWW-Authenticate: Basic realm="Authorization Required!"' ); 
    header( 'HTTP/1.0 401 Unauthorized' ); 
    echo 'Authorization Required!'; 
    exit; 
} 
?> 

Is there something missing or doing something wrong?

Thanks.

[Corpheous]

if (($PHP_AUTH_USER == $login ) && ($PHP_AUTH_PW == $password )) $auth = 1;  

I personally would put { } around the function done here just to seperate it more from your next if statement like so:

if (($PHP_AUTH_USER == $login ) && ($PHP_AUTH_PW == $password ))
{
    $auth = 1;
}

Aside from that, I can't see anything wrong with the code, which means the error is somewhere else.

[LordShryku]

Could be a register_globals thing. this worked for me

<?php  

$login = "aaron";
$password = "aaron";

$auth = 0;  

if($_SERVER['PHP_AUTH_USER'] == $login && $_SERVER['PHP_AUTH_PW'] == $password) {
   $auth++;  

}

if($auth!=1) {  

    header( 'WWW-Authenticate: Basic realm="Authorization Required!"' );  

    header( 'HTTP/1.0 401 Unauthorized' );  

    echo 'Authorization Required!';  

    exit;  

}  

?> 

[MagicMikey]

I just tried with the extra braces and the same thing occurs... 🙁

I don't know how I would attack troubleshooting the problem though.

[jakem]

MagicMikey, go back and re-read LordShryku's post. I think he's on the right track. It sounds like maybe you have register globals turned off...which means to access those variables (PHP_AUTH_USER and PHP_AUTH_PW) you would need to use the $SERVER array. So instead of $PHP_AUTH_USER it would be $SERVER['PHP_AUTH_USER']. If you do a phpinfo() and view the page through your browser you can find the register_globals directive and see if it is on or off.

[MagicMikey]

I tried out the script that LordShryku suggested and the problem still persists. I even tried it on a page alone in a different directory.

phpinfo() concludes that I do have register_globals turned on.

I'm extremely perplexed as to why it doesn't work. The server perhaps? www.powweb.com

Thanks.

[LordShryku]

for starters, to debug, turn all error_reporting on

<?php 
error_reporting(E_ALL);
include (dirname(__FILE__) . "/config.php"); 
func_mysqlconnect(); 

$auth = 0;  

if (($PHP_AUTH_USER == $login ) && ($PHP_AUTH_PW == $password )) $auth = 1;  

if ( $auth != 1 ) {  

    header( 'WWW-Authenticate: Basic realm="Authorization Required!"' );  

    header( 'HTTP/1.0 401 Unauthorized' );  

    echo 'Authorization Required!';  

    exit;  

}  

?>  

[MagicMikey]

Wow! I wish I knew about error_reporting(E_ALL); a long time ago...

Nine errors came up, ALL of them are Undefined variable:

Notice: Undefined variable: PHP_AUTH_USER in /index.php on line 12

Notice: Undefined variable: login in /index.php on line 12

Notice: Undefined variable: PHP_AUTH_PW in /index.php on line 12

Notice: Undefined variable: password in /index.php on line 12

Ya, well that's a start. Thanks. I wish I have more time to mess around with it now but I have to go to work in a moment. Any more suggestions would help. Thanks.

[HalfaBee]

This happens when you have PHP running as a CGI not an Apache mod.

HalfaBee

[MagicMikey]

HalfaBee, how would I go about repairing the problem? Thanks.

[superwormy]

Have you actually defined any of the variables it says are undefined?

Are 'login' and 'password' coming from a form POST?

[HalfaBee]

You can't use apache authentication with PHP running as a CGI.
I know which host you are using and there appears to be no way around it.

HalfaBee