From: "Ken" <[EMAIL PROTECTED]>
>
> Why it's bad is that, if the user clicks "cancel", they are not logged
out. They have to manually clear the field, THEN OK, then they get prompted
AGAIN, THEN they hit cancel. That's nuts, and my users aren't going to
understand that.
>
Why do they need to be able to log out?
If the user doesn't want their password saved (e.g. they're on a public PC)
then they just uncheck the "Save password" box when logging in, and then
they can close the browser and be "logged out".
If they want their password saved then they can check the "Save password"
box and not worry.
It sounds to me like you're trying to implement something that no users are
actually going to need or want...
However, if you want more control over the authentication process I suggest
making your own login form and using cookies, instead of HTTP
authentication. Then you can log users out just by unsetting the cookie(s).
Cheers
Simon Garner
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]