[vox-tech] username / password authentication with apache

[David Margolis]

Pete,

Somebody already mentioned .htaccess which is the built in apache way to
do authentication.

I prefer the php/mysql variation which requires a _users_ database (or
something to that effect), with text fields for username, password, and
maybe an auto int just for bookkeeping.  this also allows you to make a
nice custom page with a form for the login info that matches your site
instead of a weird little login popup.  it also allows to catch and deal
with login errors better (e.g. print -> whoops try again, and display the
same login page beneath.  if e-mail address is in the database, or if
email address IS the login, then you do tricky things like having them ask
to be e-mailed their password (without your intevention if you've compiled
php --with-imap).

I could go on and on about the advantages of using your own homespun
authentication system.  If you use SSL you're 100% secure, but if you use
method=post in your login form, and you don't think the material is super
sensitive, you're probably ok running this type of thing on a regular
page.

I have php code snips for all of this if you're intersted in taking a
peek.

Dave

On Fri, 23 Aug 2002, Peter Jay Salzman wrote:

> hola,
>
> i have a group of pages meant for some motorcycle buddies of mine across
> the country.
>
> it has peoples' names, phone numbers and addresses so that if any of us
> on a motorcycle trip find ourselves near another biker, we can have a
> free place to crash along with a hot meal and shower.
>
> i'd like to have the concept of "username" and "password" to protect
> these pages from non-members, since it's not really cool to have
> peoples' info out there for everyone to see.
>
> how can i use username/passwords to enable "logins" to protect these
> pages?
>
> thanks!
> pete
> _______________________________________________
> vox-tech mailing list
> vox-tech@lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox-tech
>