Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-07 Thread Jason Wong
On Tuesday 07 October 2003 03:44, PHP Webmaster wrote:

[snip]

  $redirect_url = https://; . $username . : . $password . @ . $domain .
 :2083/frontend/x/index.html;
  header(Location: $redirect_url);

The code looks OK. FWIW I've tried something like:

?php
  header(Location: http://someone:[EMAIL PROTECTED]/);
?

and it works for me.

-- 
Jason Wong - Gremlins Associates - www.gremlins.biz
Open Source Software Systems Integrators
* Web Design  Hosting * Internet  Intranet Applications Development *
--
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
--
/*
I'm having a tax-deductible experience!  I need an energy crunch!!
*/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread PHP Webmaster
Hi all,

Iv'e got a .htaccess file protecting a site using HTTPS. I have tried using
a form to send the login details to the site through the address bar
(http://user:[EMAIL PROTECTED]) but the .htaccess password protection box
still appears asking for the username and password!

The only thing I can think of is me sending invalid information, but I know
I'm not!

Any ideas appreciated.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread Mika Tuupola
On Mon, 6 Oct 2003, PHP Webmaster wrote:

 Iv'e got a .htaccess file protecting a site using HTTPS. I have tried using
 a form to send the login details to the site through the address bar
 (http://user:[EMAIL PROTECTED]) but the .htaccess password protection box

That does not look like https. Try changing to

https://user:[EMAIL PROTECTED]/

-- 
Mika Tuupola  http://www.appelsiini.net/~tuupola/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread Nathan Taylor
Does it continuously ask or just twice?  I've found a weird issue with .htaccess where 
if the domain name is a mask for a subdomain host and you try to access an .htaccess 
protected page it will prompt you for the password, redirect you to the subdomain and 
then prompt you again.

Nathan 
  - Original Message - 
  From: Mika Tuupola 
  To: PHP Webmaster 
  Cc: [EMAIL PROTECTED] 
  Sent: Monday, October 06, 2003 7:12 AM
  Subject: Re: [PHP] .htaccess - Still asking for login information although already 
sent through address bar


  On Mon, 6 Oct 2003, PHP Webmaster wrote:

   Iv'e got a .htaccess file protecting a site using HTTPS. I have tried using
   a form to send the login details to the site through the address bar
   (http://user:[EMAIL PROTECTED]) but the .htaccess password protection box

  That does not look like https. Try changing to

  https://user:[EMAIL PROTECTED]/

  -- 
  Mika Tuupola  http://www.appelsiini.net/~tuupola/

  -- 
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread PHP Webmaster

Mika Tuupola [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 On Mon, 6 Oct 2003, PHP Webmaster wrote:

  Iv'e got a .htaccess file protecting a site using HTTPS. I have tried
using
  a form to send the login details to the site through the address bar
  (http://user:[EMAIL PROTECTED]) but the .htaccess password protection
box

 That does not look like https. Try changing to

 https://user:[EMAIL PROTECTED]/

 --
 Mika Tuupola  http://www.appelsiini.net/~tuupola/

Oops, sorry. I meant HTTPS. I did also check again!

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread PHP Webmaster

Nathan Taylor [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
Does it continuously ask or just twice?  I've found a weird issue with
.htaccess where if the domain name is a mask for a subdomain host and you
try to access an .htaccess protected page it will prompt you for the
password, redirect you to the subdomain and then prompt you again.

Nathan
  - Original Message -
  From: Mika Tuupola
  To: PHP Webmaster
  Cc: [EMAIL PROTECTED]
  Sent: Monday, October 06, 2003 7:12 AM
  Subject: Re: [PHP] .htaccess - Still asking for login information although
already sent through address bar


  On Mon, 6 Oct 2003, PHP Webmaster wrote:

   Iv'e got a .htaccess file protecting a site using HTTPS. I have tried
using
   a form to send the login details to the site through the address bar
   (http://user:[EMAIL PROTECTED]) but the .htaccess password protection
box

  That does not look like https. Try changing to

  https://user:[EMAIL PROTECTED]/

  --
  Mika Tuupola  http://www.appelsiini.net/~tuupola/

  --
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, visit: http://www.php.net/unsub.php

If I use my login form, the login box pops up only once. If I copy the text
from the address bar (generated by the form) and paste it into the address
bar (after restarting the browser) the logon box does not appear.

Weird eh?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread Jason Wong
On Tuesday 07 October 2003 00:32, PHP Webmaster wrote:

 If I use my login form, the login box pops up only once. If I copy the text
 from the address bar (generated by the form) and paste it into the address
 bar (after restarting the browser) the logon box does not appear.

Perhaps you could show some code?

-- 
Jason Wong - Gremlins Associates - www.gremlins.biz
Open Source Software Systems Integrators
* Web Design  Hosting * Internet  Intranet Applications Development *
--
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
--
/*
A reverend wanted to telephone another reverend.  He told the operator,
This is a parson to parson call.
*/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] .htaccess - Still asking for login information although already sent through address bar

2003-10-06 Thread PHP Webmaster

Jason Wong [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 On Tuesday 07 October 2003 00:32, PHP Webmaster wrote:

  If I use my login form, the login box pops up only once. If I copy the
text
  from the address bar (generated by the form) and paste it into the
address
  bar (after restarting the browser) the logon box does not appear.

 Perhaps you could show some code?

 --
 Jason Wong - Gremlins Associates - www.gremlins.biz
 Open Source Software Systems Integrators
 * Web Design  Hosting * Internet  Intranet Applications Development *
 --
 Search the list archives before you post
 http://marc.theaimsgroup.com/?l=php-general
 --
 /*
 A reverend wanted to telephone another reverend.  He told the operator,
 This is a parson to parson call.
 */

Sure,

This is the code for the login form: (login_form.html)

html
head
titleControl Panel Login/title
/head
body
form name=cp_login method=post action=login_process.php
pDomain Name: input type=text name=domain size=20br
Username: input type=text name=username size=10br
Password: input type=password name=password size=10br
input type=submit name=cp_login value=Login to Control Panel/p
/form
/body
/html

This is the code for the login processor file: (login_process.php)

?php

$cp_login = $HTTP_POST_VARS[cp_login];
$domain = $HTTP_POST_VARS[domain];
$username = $HTTP_POST_VARS[username];
$password = $HTTP_POST_VARS[password];

if ($cp_login) {
 if (!$domain || !$username || !$password) {
 echo pstrongError:/strongbrOne or more form fields have been left
blank.br;
 echo Please use your browsers' back button and fill in all form
fields./p;
 exit;
 }
 else {
 $redirect_url = https://; . $username . : . $password . @ . $domain .
:2083/frontend/x/index.html;
 header(Location: $redirect_url);
 exit;
 }
}
else {
header(Location: login_form.html);
exit;
}

?

I know that there is no username/password validation code inside the
login_process.php file, but this is not my priority at the moment.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php