Preserved Topic: auto Authorize

Hi!

I got a page let's say: http://mysite.com/protected
Now If i want to access that page, the browser's authorization box pops up and asks for username and password.

How can i write a PHP script, that sents the authorization headers and then redirects to that page, so that there is no need for the user to know what were the login info and the no need to input anything in the box or even see it.

I have used my download manager, to learn how to get authorized pages:

quote:

---

<?
header('GET /protected HTTP/1.1');
header('Connection: close');
header('Host: www.mysite.com');
header('Accept: */*');
header('Pragma: no-cache');
header('Cache-Control: no-cache');
header('Referer: http://www.mysite.com/');
header('User-Agent: Mozilla/4.04 [en] (Win95; I ;Nav)');
header('Authorization: Basic cFaZdjFpeF6ZWJQejC-');
?>

---

hmm...that is very good code for reading or using direct socket functions....
But I don't want that...I just want the browser to bypass the dialog box if I somehow provide him user/pass from my script.

I assume, there should be something like:

quote:

---

<?
header("location: http://www.mysite.com/protected");
header('Authorization: Basic cFaZdjFpeF6ZWJQejC-');
?>

---

but that doesn't work...

Help is appreciated.

I know that there is a way to enter a directory that's protected by .htaccess by supplying the credtials in the URL, but I'm sure you don't want that. That displays the credentials in plain text.

Currently, I don't have enough time to analyze all this, but I bet that you can find the answer on this page: http://www.php.net/manual/en/features.http-auth.php

mr.Max, no. Not that what i'm looking for.

Pugzly, perhaps, I can try that..can you show me?

Oh sure, ask me to SHOW you.....ok, lemme see if I can find my original example.......

http://username assword@mysite.com/protectedfolder

I figured it out myself!

[edit] disabled simlies!

[This message has been edited by lallous (edited 12-11-2001).]

Yeah, I've got a form that asks for user name and password, then just assembles the URL via JavaScript and does a window.location.

Problem is that the password is then part of the URL, and plainly visible.