Re: [nyphp-talk] Another stupid thing

2009-02-02 Thread Paul A Houle
Digest authentication doesn't really work because the different browser and server vendors never achieved interoperability. If you're worried about transmissions being intercepted, use SSL. Both Apache 2 and IIS have SSL built in, so it's straightforward to implement. You can spend a

Re: [nyphp-talk] Another stupid thing

2009-02-02 Thread Michael B Allen
On Sun, Feb 1, 2009 at 12:15 PM, Michele Waldman wrote: > I'm sorry for all these stupid posts. I'm in the middle of a learning > process. It's always darkest before the dawn. > > > > I see cookies are viewable and editable. > > > > Does anyone know if any browsers allow the user to view and edi

Re: [nyphp-talk] Another stupid thing

2009-02-02 Thread Fernando Gabrieli
you could use HTTPS and a simple form for authentication...that would be transparent to PHP and could implement a secure solution for logging users in, i am not sure if this is what you need fernando On Sun, Feb 1, 2009 at 2:15 PM, Michele Waldman wrote: > I'm sorry for all these stupid posts

Re: [nyphp-talk] Another stupid thing

2009-02-01 Thread Daniel Convissor
Michelle: > I see cookies are viewable and editable. > > Does anyone know if any browsers allow the user to view and edit the request > Authorization? Absolutely _everything_ sent to the server can be edited in one way or another. This includes things such as, but not limited to, user agents,

[nyphp-talk] Another stupid thing

2009-02-01 Thread Michele Waldman
I'm sorry for all these stupid posts. I'm in the middle of a learning process. It's always darkest before the dawn. I see cookies are viewable and editable. Does anyone know if any browsers allow the user to view and edit the request Authorization? If I hack the mod_auth_digest file t