.oO(David B)
Quote:
I also need to get started on passwords. Specifically, I need to learn
how to password-protect a page I'm going to use to add and modify
information in an online database. |
The easiest way is to use basic HTTP authentication on Apache servers,
it only requires two files: a .htaccess in the directory to protect and
another file with the encrypted passwords. Then if the user requests a
file from that directory the server returns a 401 status code
("Unauthorized") and a little login box pops up in the browser. Only
little problem is that with this method it's not really possible for a
user to logout, except for closing all browser windows.
Quote:
I think someone discussed it on this
forum a while ago and suggested "session passwords," but I can't find
that thread. It might have been another forum. |
This would be the other way - doing it by hand with own scripts. It's
more flexible, but also a bit more complex and you have to make sure
that there are no ways to compromise the login system and directly
access the files. There are sites that check the login only on the first
page, but all following are freely accessible if you know the URL ...
HTH
Micha