Re: [PHP] Secure User Auth

2002-02-03 Thread Viper
It wont matter if it is sent in clear text because at that point you are over https/SSL. The entire stream is encrypted. I understand the need for using the existing system. I think LDAP does look like a good way to go. -=>Adam<=- Quoting James Arthur <[EMAIL PROTECTED]>: > On Sunday 03 Feb

Re: [PHP] Secure User Auth

2002-02-03 Thread James Arthur
On Sunday 03 Feb 2002 17:43, Viper wrote: > Well it depends what you want to do, Do they need to just get into the app > or do they need to have different access levels? If they dont need access > levels just use htaccess that should work out fine. > htaccess isn't secure enough, since it sends t

Re: [PHP] Secure User Auth

2002-02-03 Thread Viper
Well it depends what you want to do, Do they need to just get into the app or do they need to have different access levels? If they dont need access levels just use htaccess that should work out fine. -=>Adam<=- Quoting James Arthur <[EMAIL PROTECTED]>: > Hi > > I have a web site that needs

[PHP] Secure User Auth

2002-02-03 Thread James Arthur
Hi I have a web site that needs a secure login system. Users of the system can SSH in to the server, and POP, IMAP, Postgres and other services are provided, and I'd like the users to be able to log in to the site - obviously as securely as possible. Maybe using SSL + sessions? I have not use