httpAuth

最新推荐文章于 2023-03-06 22:40:31 发布

原创最新推荐文章于 2023-03-06 22:40:31 发布 · 616 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#header #authentication #server #credentials #php #passwords

PHP 专栏收录该内容

45 篇文章

订阅专栏

本文介绍了一个简单的PHP脚本，用于实现基本的HTTP身份验证。该脚本定义了一组允许的用户名及其对应的密码，并检查客户端提供的凭证是否匹配这些预定义的凭证。

<?php // An array of allowed users and their passwords $users = array( 'jackbenimble' => 'sekret', 'littlepig' => 'chinny' ); // If there's no Authentication header, exit if (!isset($_SERVER['PHP_AUTH_USER'])) { header('HTTP/1.1 401 Unauthorized'); header('WWW-Authenticate: Basic realm="PHP Secured"'); exit('This page requires authentication'); } // If the user name doesn't exist, exit if (!isset($users[$_SERVER['PHP_AUTH_USER']])) { header('HTTP/1.1 401 Unauthorized'); header('WWW-Authenticate: Basic realm="PHP Secured"'); exit('Unauthorized!'); } // Is the password doesn't match the username, exit if ($users[$_SERVER['PHP_AUTH_USER']] != $_SERVER['PHP_AUTH_PW']) { header('HTTP/1.1 401 Unauthorized'); header('WWW-Authenticate: Basic realm="PHP Secured"'); exit('Unauthorized!'); } echo 'You/'re in ! Your credentials were: '; echo 'Username: ' . $_SERVER['PHP_AUTH_USER'] . ' '; echo 'Password: ' . $_SERVER['PHP_AUTH_PW'];