Re: [PHP] basic authentication usage

2013-06-10 Thread Julian Wanke
I just mentioned that as an example. For this authentification the server sends a Authorization header. The client's browser requests the credentials from the user and save them in the RAM. Now the client's browser sends the credentials to the server. And what's important: The browser sends th

Re: [PHP] basic authentication usage

2013-06-10 Thread Jim Giner
On 6/10/2013 4:33 PM, Julian Wanke wrote: I think that the problem here is, that the unset of the $_SERVER["PHP_AUTH_USER"] variable is not affecting the client's browser. If you've got a directory protection, the browser needs a restart to show the login dialog before. I may be wrong because I'm

Re: [PHP] basic authentication usage

2013-06-10 Thread Julian Wanke
I think that the problem here is, that the unset of the $_SERVER["PHP_AUTH_USER"] variable is not affecting the client's browser. If you've got a directory protection, the browser needs a restart to show the login dialog before. I may be wrong because I'm using forms normally but the Authentifi

[PHP] basic authentication usage

2013-06-10 Thread Jim Giner
Trying to learn how this works for a simple security need I have. Nothing serious, hence this experiment. My code: if (!isset($_SERVER['PHP_AUTH_USER'])) { header('WWW-Authenticate: Basic realm="My Realm"'); header('HTTP/1.0 401 Unauthorized'); echo 'You have chosen not to signin'; e