[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Authentication



-----BEGIN PGP SIGNED MESSAGE-----



On Sun, 28 Feb 1999, Jason Pincin wrote:

> > Negative mucacho.  Neither Perl nor PHP support HTTP auth.  HTTP auth
> > occurs *BEFORE* the CGI gets executed.  Only modules support http auth.
> 
> Well... PHP *is* a module...

Let me re-phrase that.  Only modules can supporrt http auth.  The PHP
module would have to have a hook into Apache to support that.  Apache has
something like 14 steps to process a request.  One of those is
authorization, which occurs *before* the page is read by Apache.  Hence,
you can't do the http auth using PHP code inside the page.

> If we can overcome the issues of doing http auth from MySQL then I'm OK
> with it.  I don't want to run yet another DB and introduce that and it's
> overhead...

I'll look into it more.

> I don't think http auth would change our model too much (article
> commenting, etc.)  

I agree.  The best way to find this out though is to do a web page flow
chart showing the different paths people can take.  It will also help us
decide on the directory structure of the site.

Oh, btw, I haven't heard yet from Chris DiBona re: Slashdot and MySQL and
the memory leak.  The good news is that I should get the change to ask Rob
Malda in person tonight.  Slashdot say's he'll be at a cafe walking
distance from my apartment starting at 7 tonight.

Later...

- -- 
Aaron Turner           | Either which way, one half dozen or another. 
aturner@pobox.com      | Check out the Red Hat Linux User's FAQ Online!
www.pobox.com/~aturner | http://www.pobox.com/~aturner/RedHat-FAQ/
All emails from this account are PGP signed.  Lack of a signature is "bad".
PGP Key fingerprint = FB E1 CE ED 57 E4 AB 80  59 6E 60 BF 45 1B 20 E8



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNtsqzjM3jpXy1kJtAQFhYQQApED6P2NazPaetLS5dkyBpFBw2fctmfku
FCD3h/0aUkyglHUd0Nn9Z2ell4nQGNOLM1drxiPim0ScbNHDSfbxPim6ciUnHL+U
67FofpM6YsFEogadnYKZGp1oZEkFq3tCii/SLi/+9gVE5FRZE0NSPBLSgf4UmnvJ
vAG+r2hBTLA=
=+Get
-----END PGP SIGNATURE-----