Basic Hard Coded Authentication Error!

[techwizz]

Hello,

I am having errors with basic php authentication.

In this example i have used hard coding for username and password.

I've done database & flat file authentication in the past, but i cant seem to see the error in this code.

In fact i've taken it straight from a book.

The code...

<?php
if (($_SERVER['PHP_AUTH_USER'] !='username') || ($_SERVER['PHP_AUTH_PW'] !='password'))

{

header('WWW-Authenticate: Basic Realm="Members Area"');
header('HTTP/1.0 401 Unauthorized');
	echo('This is a members only area!');
	die;

}

//Members stuff here

echo('You have reached the members area!');
?>

Maybe my php version is not up to date.

Any help would be appreciated!

:eek:

[thorpe]

what are the errors???????

are username and password meant to be strings? or variables?

[techwizz]

errors are that i cannot complete authentication.

i get the
This is a members only area!

meaning that it does not reconize that the username and password i entered are legit.

[thorpe]

are username and password meant to be strings? or variables?

where does it collect your username password from?

[techwizz]

They are neither i belive.

The code simply says.. if the 'PHP_AUTH_USER' is not username

or

'PHP_AUTH_PW' is not password.. display the 401 error.

if (($_SERVER['PHP_AUTH_USER'] !='username') || ($_SERVER['PHP_AUTH_PW'] !='password'))

the problem is that i am entering username and password

these are the literal username and password.

I however cannot get authentication.

???

Sorry for lack of clarity... thanks!

[LoganK]

Have you checked to see what PHP sees the variables as?

Like having PHP echo($_SERVER['PHP_AUTH_USER']); and then working off from that?

[techwizz]

Yes i have had it echo the username and passwrod... same thing. lol

says its right. 😕

[konsu]

hello, what is the OS, web server, and PHP version you are using?

[LoganK]

So do some more debugging - if it's reading the passwords right, then something is wrong with your comparison.

Try a very simple if ($SERVER['PHP_AUTH_USER'] == "username") { echo "True"; } else { echo "False"; }

That will very quickly lead you along the lines of what's wrong. This is tedious, but that's what debugging is all about! There was a great article about software and quality control testing this week in SD Times - take a look at it if you can.