heres my dilema... im trying to setup a client login portal for my web design side business
i have the login portal working fine... users enter their email password and domain
if the credentials are legit it simply forwards them to an underlying directory
right now, with apache, i have the main ~clients directory protected so that you cant get indexes, HOWEVER, if you know the correct underlying directory name, you can load that just fine (uses apaches SATISFY ALL method)
now, what id like todo is remove that method so that even if you know the correct directory you have to be authenticated through the portal first
is there a way using apache auth to interface with PHP sessions to determine if the user is validated and let them into their respective directory?
i guess im looking for an apache end solution... i dont want to have to include a code snippet into EVERY project i have running and then have to remove it when i deploy the sites
so e.g. i can setup the underlying directories to mandate an authenticated user and somehow when php redirects to that underlying directory it tells apache it has an authenticated user using a header maybe
