WeberDev.com PHP and MySQL Code

LOG IN
BEGINNER GUIDES  |  PHP CLASSES  |  CODE SEARCH  |  ARTICLES SEARCH  |  PHP FORUMS  |  PHP MANUAL  |  PHP FUNCTIONS LIST  |  WEB SITE TEMPLATES
Start typing to search for PHP and MySQL Code Snippets and Articles Search
Submit a code Example / Snippet Submit Your Code
Search Engine Optimization Monitor SEO Monitor
Web Site UpTime Monitor UpTime Monitor
WeberDev's Monthly code contest PHP Code Contest
Your Personal Examples List My Favorite Examples
Your Personal Articles List My Favorite Articles
Edit Account Info Update Your Profile
PHP Code Search
Web Development Forums
Learn MySQL Playing Trivia
PHPBB2 Templates
Web Development Index
PHP Web Logs (BLogs)
Web Development Resources
Web Development Content
PHPClasses
PHP Editor
PHP Jobs
Vision.To Design
Ajax Tutorials
PHP Programming Help
PHP/MySQL Programming
Webmaster Resources
Webmaster Forum
XML meta language
website builder
Submit Site
Forex Trading Online forex trading platform

Go Back Add a Comment Send this example to a friend Add this Article to your personal favoritest for easy future access to your favorite Code Examples and Articles. Submit a code example Print this code example.
BACK ADD A COMMENT SEND TO A FRIEND ADD TO MY FAVORITES ADD CODE EXAMPLES PRINT
Title : Authentication script to authenticate users in Active Directory through LDAP.
Categories : LDAP, Authentication, Cookies, PHP Update Picture
Patrick Dooley
Date : Feb 25th 2002
Grade : 3 of 5 (graded 8 times)
Viewed : 33543
File : No file for this code example.
Images : No Images for this code example.
Search : More code by Patrick Dooley
Action : Grade This Code Example
Tools : My Examples List

  Submit your own code examples 
 

Simple and fast authentication module when you want to authenticate your users
againt Active Directory through LDAP. The script will also store the username,
Display Name, and fully qualified DN ie;
DN=user,ou=users,ou=account,dc=domain,dc=com in a cookie. You could also
store any other attribute of the user in the cookie as well (email address, office
phone, etc...)

Note: you will need to change the server, basedn and filter variables for your
environment.

Just place an include "auth.in";
at the top of every file that you want protected.


<?
$server="XXX.XXX.XXX.XXX";        //change to ip address of ldap server
$basedn="ou=users, ou=accounts, dc=domain, dc=com";        //change to reflect the ou
and
domain that your users are in.
$script=$_SERVER['SCRIPT_NAME'];
if (isset($HTTP_COOKIE_VARS['cookie'])) {         //If cookie exists, retrieve it and
put it in an
array for use.
        $cookie=$HTTP_COOKIE_VARS['cookie'];
        }
if (isset($cookie)) {                                 
        $username=$cookie['user'];
        $password=($cookie['token']);
        $fullname=$cookie['fullname'];
        $fqdn=$cookie['fqdn'];
        $dn = "cn=$username, ";
                if (!($connect = ldap_connect($server))) {
                        die ("Could not connect to LDAP server");
                }

                if (!($bind = ldap_bind($connect, "$dn" . "$basedn", $password))) {
                        die ("Could not bind to $dn$basedn");
                }
        } else {
                if ((isset($_POST['username'])) && (isset($_POST['password']))) {
                        $username=$_POST['username'];
                        $password=$_POST['password'];
                        $filter="(&(|(!(displayname=Administrator*))(!
(displayname=Admin*)))(cn=$username))";        //define an appropriate ldap search filter
to
find your users, and filter out accounts such as administrator(administrator should
be
renamed anyway!).
                        $dn = "cn=$username, ";
                                if (!($connect = ldap_connect($server))) {
                                        die ("Could not connect to LDAP server");
                                }

                                if (!($bind = ldap_bind($connect, "$dn" . "$basedn",
$password))) {
                                        die ("Could not bind to $dn");
                                }
                $sr = ldap_search($connect, $basedn,"$filter");
                $info = ldap_get_entries($connect, $sr);
                $fullname=$info[0]["displayname"][0];
                $fqdn=$info[0]["dn"];
                setcookie("cookie[user]",$username);
                setcookie("cookie[token]",$password);
                setcookie("cookie[fullname]",$fullname);
                setcookie("cookie[fqdn]", $fqdn);
        } else {
?>


<html>
<head>
<title>Portal Login</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="expires" content="0">
<meta http-equiv="pragma" content="no-cache">
</head>
<SCRIPT LANGUAGE="JavaScript">
        <!--
                document.onmousedown=click;
                function click()
                {
                        if (event.button==2) {alert('Right-clicking has been
disabled by
the administrator.');}
                }
                
        //-->
        </SCRIPT>
<div align="center">
<form method="post" action="<? echo $script; ?>">
<div align="center">

<table width="210" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center">
<fieldset>
<Legend><font face="Verdana,Tahoma,Arial,sans-serif" size="1"
color="gray">Enter Credentials</font></Legend>
<table border="0" cellspacing="3" cellpadding="0">
<tr>
<td align="right" valign="middle"><b><font
face="Verdana,Tahoma,Arial,sans-
serif" size="1" color="gray">Username:</font></td>
<td align="center" valign="middle">
<input class="clear" type="text" size="15" name="username">
</td>
</tr>
<tr>
<td align="right" valign="middle"><b><font
face="Verdana,Tahoma,Arial,sans-
serif" size="1" color="gray">Password:</font></td>
<td align="center" valign="middle">
<input class="pass" type="password" size="15"
name="password">
</td>
</tr>
</table>
<input type=image src="images/login.gif" alt="Login"
name="image">
<br>
</div>
</td>
</tr>
         </fieldset>
</table>
<br>
<table width="640"><tr><td align="center">
<font face="Verdana,Tahoma,Arial,sans-serif" size="1"
color="silver">This System is
for the use of authorized users only. Individuals using this computer system
without
authority, or in excess of their authority, are subject to having their activities
on this system
monitored and recorded by system personnel. In the course of monitoring individuals
improperly using this system, or in the course of system maintenance, the activities
of
authorized users may also be monitored. Anyone using this system expressly consents
to
such monitoring and is advised that if such monitoring reveals possible criminal
activity,
system personnel may provide the evidence of such monitoring to law enforcement
officals.
This warning has been provided by the United States Department of Justice and is
intended to
ensure that monitoring of user activity is not in violation of the Communications
Privacy Act of
1986.</font>
</td></tr></table>

</div>
</form>

</div>
</body>
</html>
<?
die ();
}
}
?>



PHP4 MYSQL Authentication Script with cookie. Short & Sweet
Categories : Authentication, Apache, Cookies, PHP, MySQL
Authenticator for Exchange Server LDAP
Categories : PHP, Authentication, LDAP, Security, Sessions
Complete, simple working example of login screen and check on a unique page using php functions, cookies and mysql database.
Categories : PHP, Cookies, MySQL, HTML and PHP, Authentication
Using $PHP_AUTH_USER and $PHP_AUTH_PW to authenticate.
Categories : Authentication, PHP
Basic Authentication with sessions
Categories : PHP, Beginner Guides, Authentication, Form Processing, Sessions
A flat file counter
Categories : PHP, Cookies, Filesystem, Beginner Guides
Authorize Me! An authentication script.
Categories : MySQL, Databases, Authentication, PHP
Simple Password example
Categories : PHP, Authentication, Security, HTTP
PHP Function to Encrypt/Decrypt a string without a known key. The string itself has his own different key for every character.
Categories : PHP, Algorithms, Security, Authentication, Encryption
Windows 2003 Active Directory User Query (Ldap)
Categories : PHP, LDAP
cookie
Categories : Cookies, PHP
ldap_add -- Add entries to LDAP directory
Categories : PHP, PHP Functions, LDAP
Function to remember password
Categories : PHP, Authentication, Personalization and Membership
A web-based php3 IMAP email client supporting address books, attachements (downloading and sending), LDAP searching, and much much more.
Categories : Email, PHP, LDAP
Is there some possibility to link a database to an htaccess file, so that instead of having a passwd file you would have a database with DES-crypted password and username fields?
Categories : Authentication, PHP, General SQL, Databases
 Patrick Dooley wrote : 786
Ooops, just copy this text into a file called "auth.inc" and include it at the top of every page you want protected.
 
 Bruce Truman wrote : 1023
Hello,

I am having a problem with this script. Can you please help me out. I am not sure if I am setting all the variables correctly and I get the following error:

Fatal error: Call to undefined function: ldap_connect() in D:\intranet\loginnt.php on line 28

 
 Jeremy Polley wrote : 1061
include "auth.inc";

all that simply did was added the code to the page that was already there, also, it is not contacting active directory properly, how can this be fixed?
 
 Gus Kilkenny wrote :1352
Hi

May I first say thanks for a very useful script. I have a slight problem with it though in that I can`t get some users to authenticate. The reason is that we have one parent OU with child ou`s that brake off containing a branch with computers,users,printers in there. so at the $basedn="ou=users, ou=accounts, dc=domain, dc=com";    section the first ou contains users but the second only allows us to specify one ou (or branch in our structure)

Can you tel me a way (bar moving all users in to one ou) that I can authenticate across multiple branch ou`s?

Many thanks
Gus