Posted by Colin McKinnon on 04/09/07 19:31
abracad_1999@yahoo.com wrote:
> I have installed the open source PHP Deadlock authentication system.
> It uses .htpasswd and .htaccess files. This works well apart from it
> doesn't allow user logout without closing their browser.
Yes - it can't - that's the way HTTP authentication was designed.
>
> Any suggestions to make it work? Or any other php authentication
> system that allows user registration, email confirmation, forgotten
> password reminders, and logout.
>
Use PHP sessions.
And if you must send a password from the client...
> die('The logout script does not support digest authentication.');
....always make sure its encrypted.
C.
Navigation:
[Reply to this message]
|