> Is there a way I can supply the username/password to
>            that htaccess-protected page so that apache's box will
>              not appear? Like, supplying the uname/pass pair via
>              GET or POST or cookies or however? Note that the php
>              login combination is same with what apache expects.

>             I would have included that page as part of my php site
>            but i just dont have control over that page.


If I remember it correctly (hmm.. gotta read those rfc's again)
authentication is passed on the HTTP header request in plain text (very
insecure). If you just link the
actual page on your site, the client's browser still doesn't have the
authentication data with it hence, the remote server asks it to
authenticate again.

Here's what I think is a viable solution (albeit not straight forward).
Proxying. You'll have a script or somthing like that, that will do the
actual data retrieval for the client. So in effect, the client just talks
to you.

the bad side to this is that you'll have to deal with HTTP directly so you
could insert the authentication parameters on the request header.

here's my 0.02 ... :)

If you need a detailed way of doing this, just ask me off - list

Regards,

-Mark

*************************************************************************
  Mark Anthony J. Mercado                               [EMAIL PROTECTED]

  Laguna Internet, Incorporated
  Rm 404 Vega Centre, Lopez Avenue, Los Banos, Laguna, Philippines 4030
  Ph. 63 49 536.0085                                Fax. 63 49 536.0067
*************************************************************************


_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Reply via email to