Snippet Details

Snippet 23 of 43
Previous | 21 | 22 | 23 | 24 | 25 | Next
« Skip 5 | Skip 5 »

Snippets Exchange Home » PHP » PHP Authenticate

Submitted by :	George Mclachlan
WebSite:	experimentalmonkey
Snippet Date:	02 November 2001
Version:	1.0
Total Downloads:	5115
Get it :
Tutorial/Information:	Not Available
Detailed Instructions:	Not Available
Snippet problem?:	Send Report

Description:

This script will force your browser to open a username and password box, by sending a 401 HTTP response code. It will then check the username and password entered against the database.

This code will only run if PHP is installed as a module on Apache, which means it probably won't run on a Windows box.

Snippet Start:

<?php
 ////////////////////////////////////////////////////////////////
 //This function will Bring up a HTTP Authenticate Header      //
 //and check the username and password against a MySQL database//
 //Place this script in a folder and use include() to call it  //
 //then add the line  db_authenticate_user();                  //
 // For Example if this script was kept in a folder            //
 // called functions                                           //
 //           include("functions/auth.php");                   //
 //           db_authenticate_user();                          //
 ////////////////////////////////////////////////////////////////
 
 //The two variables below can be changed
 // $realm is the message which will be displayed on the pop up box
 //$err is the message that will displayed on the 401 error page
 
function authenticate_user ($realm="My Super Secret Page"
	,$err="You Must Enter a Username and Password to Enter this Area"
)
{
	Header("WWW-Authenticate: Basic realm=\"$realm\"");
	Header("HTTP/1.0 401 Unauthorized");
	die($err);
}
//Change the $db_name to the name of the DB you wish to connect to
 $db_name = "##your Database name##";

//Change below to fit ("host", "username", "password")
$connection = @mysql_connect("##Your host##", "##Your Username##", "##Your Password") or die("Couldn't connect.");
 
 //Connect to the DB
$db = @mysql_select_db($db_name, $connection) or die("Couldn't select database.");

//Change the table name to suit and $realm if you wish to display a different message
function db_authenticate_user($table="##Your Table name##",$realm="My Super secret page"
	,$err="You Must Enter a Username and Password to Enter this Area"
	,$username=""
	,$password=""
)
{
	global $PHP_AUTH_USER;
	global $PHP_AUTH_PW;

if (empty($PHP_AUTH_USER))
	{
		authenticate_user($realm,$err.": header");
	}
	else
	{
		if (empty($username)) { $username = "username"; }
		if (empty($password)) { $password = "password"; }

$query = "select $user_field from $table 
			where $password = password(lower('$PHP_AUTH_PW')) 
			and $username = lower('$PHP_AUTH_USER')
		";
		$result = $query;
		if ($result) { list($valid_user) = mysql_fetch_row($result); }
		if (!$result || empty($valid_user))
		{ 
			authenticate_user($realm,$err.": query");
		}
	}
	}

Snippet End:

N/A

::back to top::

Want to submit or track a Snippet?
Need an extension from the store?
Don't have a login?

Register Now!
Why register?

Cartweaver: E-Commerce Power for the ASP, ColdFusion, and PHP Developers

Cartweaver- Get your ASP, ColdFusion, or PHP store on the web faster than you thought possible!

::This page last modified 3/29/2013 at 14:12::

Copyright © 2001-2013 DreamweaverFAQ.com All Rights Reserved.
All brands, trademarks, tutorials, extensions, code, and articles are the property of their respective owners.
A production of Site Drive Inc.
Legal Notice | Privacy Policy | Disclaimer & Notice