Re: [PHP] Re: Authentication with PHP and HTTP

2002-11-14 Thread Maxim Maletsky
using this method for a production environment is incredibly vulnerable. Just think of having a link on that page to some other site (or even having a third-party banner displayed) on which there is a hit counter (and on 90% there are) those can simply read the link in their logs. Never ever use

Re: [PHP] Re: Authentication with PHP and HTTP

2002-11-14 Thread BigDog
Just never do it period...that is the best habit to have... That is poor coding on the programmers part... On Fri, 2002-11-15 at 00:59, Maxim Maletsky wrote: using this method for a production environment is incredibly vulnerable. Just think of having a link on that page to some other site (or

Re: [PHP] Re: Authentication with PHP and HTTP

2002-11-05 Thread Silver
very true :) thx - I will keep that in mind... Chris Shiflett [EMAIL PROTECTED] schrieb im Newsbeitrag news:3DC71CBE.2050703;php.net... You can hide URLs by fetching them with one of your own PHP scripts: base href=www.site.com ? readfile(http://user:password;www.site.com/); ? I think it

Re: [PHP] Re: Authentication with PHP and HTTP

2002-11-05 Thread ed
I've tried both methods without success. header(Location: http://(user):(pass)www.mysite.com); does the transfer but I still get prompted for a username and password by Apache readfile(http://(user):(pass)www.mysite.com); brings a warning message. Warning: readfile(http://...;www.mysite.com/)

Re: [PHP] Re: Authentication with PHP and HTTP

2002-11-04 Thread Chris Shiflett
You can hide URLs by fetching them with one of your own PHP scripts: base href=www.site.com ? readfile(http://user:password;www.site.com/); ? I think it might be at least better than frames. :-) Chris silver wrote: you could use this URL syntax: http://user:password;www.site.com to