My newest adventure!

[ajdegans]

Im still working on the ZeroComplete enviroment. and need to create an USER AUTH thing for a simple admin area. This area is needed to edit the website and post news and blog (diary) things 😉

My needs: A simple authenfication script for one directory containing one or two files...

NO DATABASE, and if there is one needed a flatfile? (just plain textfile) only. I've experimented with something useing a file 'pass.txt' as dB but it wouldnt work... It just wasnt a safe thing 🙁

No cookie function needed...

So if someone is bored to dead, help me out a bit 😃

Thanks in advance!

[LordShryku]

If it's going to be that simple, why not just use .htaccess?

[ajdegans]

Hm yeah, but unfortunatly thats not allowed on every server 🙁

🙁

[LordShryku]

Well, for security, I always put the flat file outside of the document root. You could go that route. You could also just store the usernames/passwords in arrays inside of the php authentication file, just [man]md5[/man](or whatever semi-encryption you want to use) the passwords first.

[ajdegans]

I did some research.. and wrote this file.... Think its a save solution?

<?php 
$auth = 0; 
if (($PHP_AUTH_USER == "test" ) && ($PHP_AUTH_PW == "testpw" )) $auth = 1; 
if ( $auth != 1 ) { 
    header( "WWW-Authenticate: Basic realm='Authorization Required!'" ); 
    header( "HTTP/1.0 401 Unauthorized" ); 
    echo 'Authorization Required!'; 
    exit; 
} 


//code hier
echo "You are now logged in, in the real situation here is the website content!";

?>

My idea is to replace the values 'test' and 'testpw' with $user and $pass (or something) and put it in the main config file of my enviroment.

Only thing i must change then is to inlcude this:

include('include/config.php');

at the top 😃

[LordShryku]

WWW-Authenticate basically emulates a .htaccess. Don't know that it would work on IIS, but give it a shot...

[ajdegans]

How much IIS server run PHP ? my guess is not to much...

or am i wrong? 😕

[LordShryku]

Well, the point going back to my first comment. Not all configurations may support it...