Voting

The Note You're Voting On

marco dot moser at oltrefersina dot it ¶

7 years ago


I suggest to demand user's authentication and management to the web server (by .htaccess, ...):



1. configure a global /logon/ directory with a .htaccess file restricted access



2. use fopen wrapper:



  $hh = @fopen("http://{$_SERVER['PHP_AUTH_USER']}:{$_SERVER['PHP_AUTH_PW']}".

    @{$_SERVER['SERVER_NAME']}/logon/", "r");

  if (!$hh) authenticate(); // usual header WWW-Authenticate ...

  fclose($hh);

<< Back to user notes page