Posted by Colin McKinnon on 04/09/07 19:31

abracad_1999@yahoo.com wrote:

> I have installed the open source PHP Deadlock authentication system.
> It uses .htpasswd and .htaccess files. This works well apart from it
> doesn't allow user logout without closing their browser.

Yes - it can't - that's the way HTTP authentication was designed.

>
> Any suggestions to make it work? Or any other php authentication
> system that allows user registration, email confirmation, forgotten
> password reminders, and logout.
>

Use PHP sessions.

And if you must send a password from the client...
> die('The logout script does not support digest authentication.');
....always make sure its encrypted.

C.

[Back to original message]