Authentication to Access Page

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

Right!

I've just designed my PHP News Script, although the thing is anyone can access it by visiting the appropriate page on my site, and then can publish there articles, what I wanted to do, is get a box to pop up in internet explorer asking for a username and password to access the page (news.php), how would I do this?

Thanks

Justin

Team Member Joined: 06 Jan 2002 Posts: 2564

Isn't it possible to use .htaccess Password Protection?

Posted: Sun Apr 28, 2002 4:24 pm (21 years, 11 months ago)

If its just one file could you hard code the username and password into the script.

How secure would this be?

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

403

Code:

HTACCESS :
AuthName "The Kop Online News Administration"
AuthType Basic
AuthUserFile .htpasswd
Allow From All
<Files news.php>
Deny From All
</Files>

http://www.koponline.cc/news.php

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

Darren wrote:

If its just one file could you hard code the username and password into the script.

How secure would this be?

I'd rather have the pop-up box to be honest, so the visitors can't see the admin page!

Posted: Sun Apr 28, 2002 4:33 pm (21 years, 11 months ago)

Firstly do you need to provide the full path to the .htpassword file? I did when I set mine up.

Secondly, how did you generate the password? it took me several attempts with various scripts people had online before I found one that worked.

Team Member Joined: 06 Jan 2002 Posts: 2564

Try this?

Code:

<Files news.php>
AuthName "The Kop Online News Administration"
AuthType Basic
AuthUserFile .htpasswd
</Files>

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

Daniel wrote:

Try this?

Code:

<Files news.php>
AuthName "The Kop Online News Administration"
AuthType Basic
AuthUserFile .htpasswd
</Files>

now it doesn't ask for any authentication, goes straight to the script Sad

Posted: Sun Apr 28, 2002 4:40 pm (21 years, 11 months ago)

What about?

Code:

<?

if($username != "myusername" && $password != "mypassword") {

// Login form
//i.e. two text inputs with names 'username' and 'password' and a submit button

} else {

//your news script

}

?>

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

Darren wrote:

Firstly do you need to provide the full path to the .htpassword file? I did when I set mine up.

Secondly, how did you generate the password? it took me several attempts with various scripts people had online before I found one that worked.

The script is in the root directory, along with the .htaccess and .htpasswd file.

Generated the password using the tool suggested in the tutorial on this site!

Team Member Joined: 06 Jan 2002 Posts: 2564

Well, try this then:

Code:

if ($password=="yourpassword") {

ALL YOUR CODE HERE

}

else {

print ("Please login.");

Then access your script like this:

news.php?password=yourpassword

You'll then have to include the password in all links in your script, if there are any.

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

Daniel wrote:

Well, try this then:

Code:

if ($password=="yourpassword") {

ALL YOUR CODE HERE

}

else {

print ("Please login.");

Then access your script like this:

news.php?password=yourpassword

You'll then have to include the password in all links in your script, if there are any.

I may use that as a stopgap, but I really need a solution with a pop-up password box for a few clients that I am designing sites for, as the problem would be, as you can guess, people can see the password just by looking at the address bar if they are watching you.

Team Member Joined: 06 Jan 2002 Posts: 2564

Could you password protect the whole directory (and if needed move the script to it's own directory)?

4WebHelp Addict Joined: 07 Jan 2002 Posts: 1060

Daniel wrote:

Could you password protect the whole directory (and if needed move the script to it's own directory)?

Yeah, but the trouble is that http://www.koponline.cc/article_summary.html is included on the front page, with the headlines, I tried it in http://www.koponline.cc/news, but as you can probbably guess, when you include a file, the paths screw up, eg, it points to http://www.kopoline.cc/articlefilename.html, not http://www.koponline.cc/news/articlefilename.html

Posted: Sun Apr 28, 2002 4:52 pm (21 years, 11 months ago)

Justin wrote:

I may use that as a stopgap, but I really need a solution with a pop-up password box for a few clients that I am designing sites for, as the problem would be, as you can guess, people can see the password just by looking at the address bar if they are watching you.

Then do it my waywith a little form and use session variables to keep them logged in between pages.