ROB — Tue, 13 Nov 2001 03:03:42 +0000

ya, i may have to, then after the login immediately forward them to another page so their login info isn't visible. im thinking ill just use the popup though, which while ugly is more secure and reliable.

Mark Hensler — Sun, 11 Nov 2001 19:32:29 +0000

How about using JS...

That will cause the clients browser to make the request instead of the PHP script.

ROB — Sun, 11 Nov 2001 07:03:05 +0000

btw this is for a redesigned interface for a network of cobalt raqs, so my options are:

A: Figure out how to get this to work
B: Use the ugly popup login
C: re-write all upteen thousand lines of raq web interface code

C isn't an option, if cobalt wants to pay me to rewrite their shite interface i'd be happy to but its not in my current employers budget.

B is the easiest way but we're trying to avoid popups of any kind, and would much rather let users log in through a web form on the main page.

A is what i'm shooting for but considering how long ive searched for an answer and havnt even found a mention of my problem im guessing it's not possible.

ROB — Sun, 11 Nov 2001 06:54:18 +0000

Quote: Originally posted by Mark Hensler
I've used the user:pass@domain.com in my IE before. I find it strange that it doesn't like it when executed by a PHP header() call.

yes i found that strange also. if it did work it would at least provide me with some sort of workaround. IE wont accept it if it's coming in a Location header though which really sucks. I cant count the times ive cursed IE for making their own standards (which defeats the whole purpose of a standard no matter how nice the "features" || "bugs" are.

Mark Hensler — Sun, 11 Nov 2001 05:49:29 +0000

I've never done any research on that. It would make sense to have a header for that.

I took over one site which the previous programmer printed a form with hidden fields for user/pass. Then JavaScript submitted the form. This gained access into a certain specified area, BUT.. it didn't use .htaccess for permissions.

I've used the user:pass@domain.com in my IE before. I find it strange that it doesn't like it when executed by a PHP header() call.

ROB — Sun, 11 Nov 2001 04:08:23 +0000

thanks to whoever made this sticky

still searching for an answer on this...