PHP http basic auth

[Mark Musone]

Yes, to do http auth "logouts" you just send it another unauthorized
http auth header..

You may want to think about doing sessions and authenticating in your
app..it solves a lot of those issues and it's much much cleaner and you
generally have a lot more control.

-Mark





-----Original Message-----
From: owner-nflug at nflug.org [mailto:owner-nflug at nflug.org] On Behalf Of
Justin Bennett
Sent: Friday, July 23, 2004 10:45 AM
To: nflug at nflug.org
Subject: Re: PHP http basic auth

Work, It prompts you for a new password, but I can deal with that, the 
user hits cancel and I have it take them to our hompage.

Thanks!

Justin

Justin Bennett
Network Administrator
Dynabrade, Inc.
8989 Sheridan Dr.
Clarence, NY 14031
 



Brodbeck, H Ross wrote:

>The apache documentation at
>http://httpd.apache.org/docs/howto/auth.html#basic says you can't,
since
>the user's browser caches the info for the session, at least. However,
>the PHP docs differ a bit: http://us2.php.net/features.http-auth. See
>Example 17-2. Apparently if you send a 401 to the browser it will clear
>its cache of the authentication info. I think this is what you're
trying
>to do, though I have never tried it.
>
>H. Ross Brodbeck
>------------------------
>Staff Engineer
>General Physics Corp
>rbrodbeck at gpworldwide.com
>716.691.1212 x68201
>
>-----Original Message-----
>From: owner-nflug at nflug.org [mailto:owner-nflug at nflug.org] On Behalf Of
>Justin Bennett
>Sent: Friday, July 23, 2004 9:22 AM
>To: nflug at nflug.org
>Subject: PHP http basic auth
>
>Quick PHP question:
>
>I have a page doing Http basic auth w/apache. Can I force a logoff of 
>the Http Auth using a PHP script?
>
>
>Justin
>
>  
>