Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:7456
Return-Path: <rui_hirokawa@ybb.ne.jp>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 86231 invoked by uid 1010); 1 Feb 2004 14:36:46 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 86198 invoked by uid 1007); 1 Feb 2004 14:36:45 -0000
Message-ID: <20040201143645.86197.qmail@pb1.pair.com>
To: internals@lists.php.net
Date: Sun, 01 Feb 2004 23:36:47 +0900
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6b) Gecko/20031205 Thunderbird/0.4
X-Accept-Language: en-us, en
MIME-Version: 1.0
References: <20040201143039.71640.qmail@pb1.pair.com> <20040201143440.81786.qmail@pb1.pair.com>
In-Reply-To: <20040201143440.81786.qmail@pb1.pair.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Posted-By: 219.180.130.25
Subject: Re: adding http digest authentication to php5
From: rui_hirokawa@ybb.ne.jp (Rui Hirokawa)


Can I attach a php script ?

<?php // a sample for digest authentication
$realm="php-users";
$uri = $_SERVER['REQUEST_URI'];
$nonce = time();

$username = "taro";
$password = "secret";

function auth_func() {
   global $realm, $nonce;

   header('HTTP/1.0 401 Unauthorized');
   header("WWW-authenticate: Digest realm=\"$realm\" nonce=\"$nonce\"");
   die('password or user name is invalid.');
}

if (empty($_SERVER['PHP_AUTH_USER'])) {
   auth_func();
} else {
   $username = $_SERVER['PHP_AUTH_USER'];
   $response = $_SERVER['PHP_AUTH_PW'];
   $nonce    = $_SERVER['PHP_AUTH_NONCE'];

   // response based on RFC2617
   $a1 = md5("$username:$realm:$password");
   $a2 = md5("GET:$uri");
   $response0 = md5("$a1:$nonce:$a2");

   print "response1:$response<br />";
   print "response0:$response0<br />";
   print "nonce:$nonce</br>";
   if ($response == $response0) {
     print "authenticated.<br />";
   } else {
     print "not authenticated.<br />";
   }
}
?>