RE: [PHP] apache webprotect logout

2003-01-27 Thread Matt Schroebel

 -Original Message-
 From: Tommy Jensehaugen [mailto:[EMAIL PROTECTED]] 
 Sent: Monday, January 27, 2003 10:32 AM
 To: [EMAIL PROTECTED]
 Subject: [PHP] apache webprotect logout
 
 When I browse to this folder I get a popup to type my name 
 and password
 in( automatic popup by internet explorer or something ).
 My question is, how do I log out? 

You can't. There is no way to log out of http authentication other then
closing the browser.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] apache webprotect logout

2003-01-27 Thread Chris Shiflett
--- Tommy Jensehaugen [EMAIL PROTECTED] wrote:
 I have protected a folder on my apache server with a
 username and password. When I browse to this folder
 I get a popup to type my name and password in(
 automatic popup by internet explorer or something ).
 My question is, how do I log out? I tried to destroy
 the session, but it didn't help.

Probably because there is no session. It sounds like you
are talking about HTTP basic authentication. This form of
authentication requires the browser to authenticate itself
with every single request. Thus, there is no idea of being
logged in, because this does not require any state
management.

However, browsers will try to be helpful and re-send the
same authentication credentials, so that you don't get
prompted every time for a username and password. This is
what makes it seem as if you are logged in.

Some people do things such as change the realm whenever
they want to make it seem as if the user is logged out. You
will only be able to do this type of thing with PHP (as
opposed to letting your Web server handle it). I think the
user notes on HTTP authentication have many suggestions
that might help you out:

http://www.php.net/manual/en/features.http-auth.php

Chris

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php