Posted By

jadedbat on 12/03/08

Tagged

php password username authentication

Versions (?)

Who likes this?

8 people have marked this snippet as a favorite

luman
robe
Scooter
lagrsen
vkolev
userpiv
cokacola
peteheaney

Simple PHP Authentication HTTP

/ Published in: PHP

URL: http://www.thatgrafix.com

I thought I would share this simple username password PHP auth script. It leans on HTTP to secure a page.. not bulletproof but quick and painless.

Expand | Embed | Plain Text

<?php
 
// input user/pass below
$username = "INSERT YOUR DESIRED USERNAME HERE";
$password = "INSERT YOUR DESIRED PASSWORD HERE";
 
// password protect via http
if(!(isset($_SERVER['PHP_AUTH_USER']) && 
	isset($_SERVER['PHP_AUTH_PW']) && 
	$_SERVER['PHP_AUTH_USER'] == $username &&
	$_SERVER['PHP_AUTH_PW'] == $password)){
		header('WWW-Authenticate: Basic realm="Secured Area"');
		header('Status: 401 Unauthorized');
		}else{
?>
 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Page Name</title>
</head>
 
<body>
<!-- // html -->
</body>
</html>
<?php } ?>

Report this snippet Tweet

Comments

Subscribe to comments

Posted By: Scooter on December 21, 2008

You can also extend this to multiple usernames and passwords by using an associated array.

$users = array("fred" => "fl1ntst0n3", "barney" => "rubbl3");

In the IF statement, you feed PHPAUTHUSER to the array as a key. If a value is retrieved, the user is valid and you can check the value against PHPAUTHPW.

Posted By: jadedbat on December 27, 2008

Good Call :)

Comment:

You need to login to post a comment.