[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Authentication



> Negative mucacho.  Neither Perl nor PHP support HTTP auth.  HTTP auth
> occurs *BEFORE* the CGI gets executed.  Only modules support http auth.

Well... PHP *is* a module...
If we can overcome the issues of doing http auth from MySQL then I'm OK
with it.  I don't want to run yet another DB and introduce that and it's
overhead...

I don't think http auth would change our model too much (article
commenting, etc.)  

> > Also, I still haven't figured out how to check passwords with MySQL.  I
> > haven't looked much since the last time I asked.  But if someone has
> > some code, that would be great.

What do you mean by check passwords?  If you were verifying a users
password you would do something like this:

select Password from Users where Handle = '<? echo handle ?>';

and then compare password(what user enters) to the Password returnerd by
the query (without passing it thru the password() function.

Jason