Download E-books Learning PHP, MySQL & JavaScript: With jQuery, CSS & HTML5 (Learning Php, Mysql, Javascript, Css & Html5) PDF

Zero 401 Unauthorized'); die("Please input your username and password"); } ? > word via default, the kind of interface Zend Server makes use of is cgi-fcgi, that's incompatible with easy authentication. notwithstanding, configuring Zend is past the scope of this ebook, so when you are utilizing it for Example 12-1 via Example 12-5, you'll like to attempt them on a unique server. to figure out the interface of a server, you could name the php_sapi_name functionality, with the intention to go back a string akin to 'cgi-fcgi', 'cli', and so forth. simple authentication isn't prompt besides on a construction site, because it is particularly insecure, yet you must know the way it really works for conserving legacy code. Please seek advice from http://php. net/php_sapi_name for extra info. first thing this system does is search for specific array values: $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW']. in the event that they either exist, they signify the username and password entered by way of a consumer into an authentication suggested. If both worth doesn't exist, the person has now not but been authenticated and also you exhibit the recommended in Figure 12-2 via issuing the subsequent header, the place uncomplicated realm is the identify of the part that's safe and looks as a part of the pop-up advised: WWW-Authenticate: simple realm="Restricted sector" If the person fills out the fields, the personal home page software runs back from the head. but when the person clicks the Cancel button, this system proceeds to the next strains, which ship the subsequent header and an mistakes message: HTTP/1. zero 401 Unauthorized The die assertion reasons the textual content “Please input your username and password” to be displayed (see Figure 12-3). determine 12-3. the results of clicking the Cancel button word as soon as a person has been authenticated, you won't be capable to get the authentication conversation to pop up back except the person closes and reopens all browser home windows, because the internet browser will maintain returning an identical username and password to personal home page. you could have to shut and reopen your browser once or twice as you're employed via this part and check out various things out. Now let’s cost for a sound username and password. The code in Example 12-1 doesn’t require you to alter a lot so as to add this money, except enhancing the former welcome message code to check for an accurate username and password, after which issuing a welcome message. A failed authentication factors an blunders message to be despatched (see Example 12-2). instance 12-2. Hypertext Preprocessor authentication with enter checking by the way, have a look at the wording of the mistake message: Invalid username / password mixture. It doesn’t say no matter if the username or the password or either have been wrong—the much less info you could supply to a possible hacker, the higher.