authentication

[Guest_imported]

Am Using PHP and MySql database with username and password fields to grant different directory level access. Am persisting Uname and Pass posting to each page, hosting company tells me no good enough. Am looking for secure way to check Uname and Pword against Dbase, persist these [PHP 3 only] + authenticate with each page.

Thanks

 

[sophisticate]

If you're just doing directory level access, why bother with PHP? You could use something like the Auth_MySQL apache module (

http://www.diegonet.com/support/mod_auth_mysql.shtml)

in pair with an .htaccess in each directory.

If you want session management on top of the authentication, however, I'd recommend PHPlib (

http://phplib.netuse.de).

Hope this helps,

brendanc@icehouse.net