<?php
require ("auth.php");
if(!isset($PHP_AUTH_USER)) {
Header("WWW-Authenticate: Basic realm=\"User Login\"");
Header( "HTTP/1.0 401 Unauthorized");
echo "You failed to provide the correct password....\n";
exit;
}
else {
$con = mysql_pconnect ("$host", "$user", "$pass") or die("Error: " . mysql_error());
mysql_select_db ("$db");
$user_id = strtolower($PHP_AUTH_USER);
$result = mysql_query("SELECT password FROM signup " . "Where username = '$user_id'");
$row = mysql_fetch_array($result);
if ($PHP_AUTH_PW != $row["password"]) {
Header( "WWW-Authenticate: Basic realm=\"Login failed please try again!\"");
Header( "HTTP/1.0 401 Unauthorized");
echo "You failed to provide the correct password....\n";
exit;
}
}
?>
Make a simple php file called auth.php with the variables $host $user $pass $db to connect
to your MySQL server.
The is a table called signup and a field named username & password.
Please comment on this is it helps you.
norman volmer wrote :486
The following case is not handled:
A username is entered, but password field is left blank. The username does not exist in db, so the query is empty, what matches the empty password! $row["pass"] must be checked not to be empty!
Richard Mike wrote :561
try this
(($PHP_AUTH_PW != $row["password"]) || (!$PHP_AUTH_PW))
Artem Polyvianiy wrote :775
This is trivial.
What you can really need is a full session handling class with MySQL table of currently logged people.