WWW-Authenticate example

jonasj (Jonas J.) — Wed, 10 May 2006 02:33:31 GMT

// Shows how to use the WWW-Authenticate header to make login pages.You find a good tutorial at php.net
// (Source: http://codedump.jonasjohn.de/ - Public domain)





$login_successful = false;



// check user & pwd:

if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW'])){



    $usr = $_SERVER['PHP_AUTH_USER'];

    $pwd = $_SERVER['PHP_AUTH_PW'];



    if ($usr == 'jonas' && $pwd == 'secret'){

        $login_successful = true;

    }

}



// login ok?

if (!$login_successful){



    // send 401 headers:

    // realm="something" will be shown in the login box 

    header('WWW-Authenticate: Basic realm="Secret page"');

    header('HTTP/1.0 401 Unauthorized');

    print "Login failed!\n";



}

else {

    // show secret page:

    print 'you reached the secret page!';

}

?>

DZone Snippets: security code

WWW-Authenticate example