PHP - HTTP autentifikacija upada u petlju bez krajaCode:
AuthName "Oblast"
AuthType Basic
AuthMySQLHost localhost
AuthMySQLUser user
AuthMySQLPassword password
AuthMySQLDB auth
AuthMySQLUserTable authorized_users
AuthMySQLNameField name
AuthMySQLPasswordField password
AuthMySQLPwEncryption none
AuthMySQLEnable on
require valid-user
AuthName "Oblast"
AuthType Basic
AuthMySQLHost localhost
AuthMySQLUser user
AuthMySQLPassword password
AuthMySQLDB auth
AuthMySQLUserTable authorized_users
AuthMySQLNameField name
AuthMySQLPasswordField password
AuthMySQLPwEncryption none
AuthMySQLEnable on
require valid-user
i ubacim ga u direktorijum na web serveru (Apache) koji sadrži još neke fajlove, među kojima je i http.php sledeće sadržine
Code:
if (($_SERVER['PHP_AUTH_USER'] != 'user') || ($_SERVER['PHP_AUTH_PW'] != 'pass'))
{
// visitor has not yet given details, or their
// name and password combination are not correct
header('WWW-Authenticate: Basic realm="Realm-Name"');
if (substr($_SERVER['SERVER_SOFTWARE'], 0, 9) == 'Microsoft')
{
header('Status: 401 Unauthorized');
}
else
{
header('HTTP/1.0 401 Unauthorized');
}
echo "<h1>Go away!</h1><p>You are not authorized to view this resource.</p>";
}
else
{
// visitor has provided correct details
echo "<h1>Here it is!</h1> <p>I bet you are glad you can see this secret page.</p>";
}
if (($_SERVER['PHP_AUTH_USER'] != 'user') || ($_SERVER['PHP_AUTH_PW'] != 'pass'))
{
// visitor has not yet given details, or their
// name and password combination are not correct
header('WWW-Authenticate: Basic realm="Realm-Name"');
if (substr($_SERVER['SERVER_SOFTWARE'], 0, 9) == 'Microsoft')
{
header('Status: 401 Unauthorized');
}
else
{
header('HTTP/1.0 401 Unauthorized');
}
echo "<h1>Go away!</h1><p>You are not authorized to view this resource.</p>";
}
else
{
// visitor has provided correct details
echo "<h1>Here it is!</h1> <p>I bet you are glad you can see this secret page.</p>";
}
i pokušam da pozovem http.php iz browser-a, on me ponovo pita za username i password iako sam ga uneo prilikom pristupa direktorijumu? Koliko ja shvatam on bi prema http.php trebao da izađe iz prve petlje i da mi kaže da imam pristup direktorijumu. Ako uklonim .htaccess fajl onda http.php radi bez problema. Ako prilikom poziva http.php unesem 'user' i 'pass' on upada u neku petlju i neće da prekine izvršavanje skripta dok ja to ne uradim.
Voleo bih da mi neko ovo razjasni.
Pozdrav.
