dtest Posted October 8, 2007 Share Posted October 8, 2007 Hi, I have these files: /httpdocs/login.php /httpdocs/secret/index.php the login.php is publicly available, but the folder 'secret' is password protected via my webhost's cpanel I would like the script login.php to check my database for the user submitted name and password and then re-direct the user to /httpdocs/secret/index.php WITHOUT the user having to authorize himself again to enter the password protected folder Is there a way to 'forward username and password' in php like this? Link to comment https://forums.phpfreaks.com/topic/72371-setting-folder-authorization-with-php/ Share on other sites More sharing options...
Rithiur Posted October 8, 2007 Share Posted October 8, 2007 If by "password protected via my webhost's cpanel" you mean HTTP authentication, then there is basically a way. You can use an url like "http://username:[email protected]/", but there are several problems in it. Firstly, it's not horribly secure, as the username and password will naturally pass through the user (though, not sure if there is much choice here), and secondly it doesn't work in IE. Sadly, for HTTP authentication, I do not know any other way you can automatically pass the data when redirecting. Link to comment https://forums.phpfreaks.com/topic/72371-setting-folder-authorization-with-php/#findComment-365007 Share on other sites More sharing options...
dtest Posted October 8, 2007 Author Share Posted October 8, 2007 Hi, Yes you're correct, I mean HTTP authentication That is really too bad that it doesn't work for IE. Does anyone know if there's another way? Link to comment https://forums.phpfreaks.com/topic/72371-setting-folder-authorization-with-php/#findComment-365015 Share on other sites More sharing options...
jellis Posted October 9, 2007 Share Posted October 9, 2007 Is it possible for you to use sessions to control the access to scripts, then use a script to download out of that folder with permissions set to 0700? That's the way I control document downloads on a couple of the sites I manage. Link to comment https://forums.phpfreaks.com/topic/72371-setting-folder-authorization-with-php/#findComment-365064 Share on other sites More sharing options...
dtest Posted October 9, 2007 Author Share Posted October 9, 2007 that's going to be really tricky. in my example I just named one file in the folder "secret" but in fact it's a folder with many files and many subfolders which are all needed to run the /httpdocs/secret/index.php script so that's not really an option Link to comment https://forums.phpfreaks.com/topic/72371-setting-folder-authorization-with-php/#findComment-365325 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.