how to login

[graziano]

Hello

What i need to do is open a user/password protected page with .htaccess Apache using php ?. I know the user/passwords so maybe with fopen it will be ok, but i dont want the user pass to apears in the url

I am trying with header in this way

header( 'Location: http://domain:2095/user+$domain/neomail.pl' );

header('WWW-Authenticate: Basic realm="WebMail" user="$user" password="$pwd"');

but it still prompt me for user and password .

Any help please ?

Thank you

[Calahan]

I might be way off here but have you tried:

header( 'Location: [url]http://domain:2095/user+[/url]$domain/neomail.pl' ); 

header("WWW-Authenticate: Basic realm='WebMail' user='" . $user . "' password='" .$pwd . "')";

I think that will work.
Basically (if I'm right), you can't add a variable straight into an echo statement as if just thinks you want to echo $pwd. You need to join them together with a . and then declare the variable.

HTH.

[graziano]

Calahan , thank you , but it didn't work 🙁
Any other suggestion ?

I found tons of docs regarding php authentication , but nothing
that explain how to pass user and password using header ..

[graziano]

any help please ?

[mtimdog]

you could use [man]include[/man] or [man]require[/man]

[graziano]

and fopen too .

but how to pass user and password using require, include and fopen ?

I explain better .

I have a webform to permit some user to login on neomail (Webmail software) ; on the webform they enter user ($user) and a password ($password) ; after that a simple php script was passing the $user and $password results in this way

<?
header("Location: http://$user:$[e-mail]/neomail.php");
?>

OK , it was working fine for years . It's stopped to work latest week after latest IE security patch !

With latest IE patch , http://user:[e-mail] is no more allowed .

So , now, I am searching an alternative way to login my users
to http://$user:$password@host/neomail.php

I don't know if exists a php solution . Any idea?

Thank you

[mtimdog]

If neomail is on the same domain as your login script, you don't need to authenticate with include/require....however, i'm not sure how the links would work....if neomail is setup so it uses one index page to do all actions, all you would have to do is make your login page the same name as the index page (presumably index.php) and include the real page in your login page if logged in. Else, it'll be a bit harder with .htaccess.