Comments on: You Sir, name password.

Question: You Sir, name password.

DragonBoy — Wed, 21 Dec 2005 14:33:09 -0800

WebSecurityFilter: I'm looking for a PHP or CGI script which would redirect a user to their password protected folder when they enter their username and password.

I am trying to build a single entry point for client access to resource files online. The idea is that I can pass out a single 'client access' URL where the client can enter their username and password which would be verified and then redirected to their folder on the server.

The maintenance of this tool needs to be absurdly easy as I plan on handing off maintenance of this to a non-tech-savvy person ASAP.

By: TonyRobots

TonyRobots — Wed, 21 Dec 2005 15:02:15 -0800

This should be very very simple. What kind of security do you need on the login information? Are you using a database for user info, or just a flat file? Do lost passwords need to be recoverable? The most complex bit is the authentication system (which needn't be too complex); the redirect after a successful login will likely be a single line of code.

If you just need a simple system that uses a text file with usernames and passwords, I could put something together for you in about a half hour.

By: devilsbrigade

devilsbrigade — Wed, 21 Dec 2005 15:12:56 -0800

How is the folder protected? .htaccess? That may be an issue for redirection, depending on how your permissions system works.

By: purephase

purephase — Wed, 21 Dec 2005 16:14:41 -0800

You don't even need PHP (or any other scripting language). If you're using Apache as the webserver, you can use .htaccess to handle the authentication side. Take a look at this tutorial for a quick and easy way of setting this up. All your "non-tech-savvy" person would have to do is is modify the .htpasswd file with user/password information.

By: blag

blag — Wed, 21 Dec 2005 16:58:58 -0800

All your "non-tech-savvy" person would have to do is is modify the .htpasswd file with user/password information.

Which would involve ftp, plain text editing and more ftp. Or SSH and command line. And still wouldn't handle the redirection.

This might work though you may have to do some hacking to get the redirection working: PHP login system with admin features.