Posted by Steve on 02/17/05 10:03

Kevin Javia wrote:
> I am experimenting on my site and I want to make it password protected like
> www.realsolution.com.
>
> If any one enters correct user name and password, only then they will be
> able to enter into my site.
>
> How can I do that in PHP?
>
> Any ideas? Thanks a ton in advance.


Try this:



function authenticate() {
header('WWW-authenticate: basic realm="My protected area"');
header('HTTP/1.0 401 Unauthorized');
print 'Please use a correct login!';
exit;
}


function authorize() {
if( (!isset($_SERVER['PHP_AUTH_USER']))
or ($_SERVER['PHP_AUTH_USER'] == '') ) {
authenticate();
}
else {
$login = strtolower($_SERVER['PHP_AUTH_USER']);
$passwd = $_SERVER['PHP_AUTH_PW'];

if (.....) { // check $login and $passwd against the list of
authorized users
return true;
}
else {
authenticate();
}
}
return false;
}

[Back to original message]