login to htaccess using PHP script (no htaccess popup)

[jobo49]

We already have a login script to our PHP application, which works fine.

We want to use htaccess to add extra security on the Linux web server. However, we don't want our users to have to perform two logins (one for our application and again for htaccess).

How do we combine the two?? This should be possible...

[piersk]

You certainly can and the details on how to do this can be found by RTFM (http://www.php.net/features.http-auth)

[jobo49]

Our tests using this method have failed. Other forum postings seem to say it's due to increased security in IE6

[piersk]

Well, thats how PHP uses the .htaccess files. If IE6 has increased security, then theres not much you can do.

[jobo49]

OK, but whether we like it or not (and most of us don't like it too much), Microsoft's IE dominates the desktop browser world. I prefer Opera, but the world uses IE: we've no choice but to build IE compatible apps.

Does anyone know of a work-around so that PHP and htaccess can still combine into a workable / usable solution. Bill Gates can't win all the battles.

Surely VERY MANY websites built with PHP need a single login which combines PHP and htaccess access? Htaccess is a powerful solution which we can't discard.

[piersk]

Originally posted by jobo49
OK, but whether we like it or not (and most of us don't like it too much), Microsoft's IE dominates the desktop browser world. I prefer Opera, but the world uses IE: we've no choice but to build IE compatible apps.

yawn... heard it before. Tis true, but theres not much we can do about it

Does anyone know of a work-around so that PHP and htaccess can still combine into a workable / usable solution. Bill Gates can't win all the battles.

Can't he??

Surely VERY MANY websites built with PHP need a single login which combines PHP and htaccess access? Htaccess is a powerful solution which we can't discard.

I think you'll find that more and more sites use a db username/pw solution instead.