Lars Petersen <lars@truth.ioflux.net> wrote:
>> > Hvordan kan man lave et krypteret login??
>>
>> <
http://www.php.net/manual/en/features.http-auth.php>
>
> Only "Basic" authentication is supported at this point.
> Det er ikke krypteret. Det er klar tekst passwords.
Nej.
Et udklip fra RFC 2617 <
http://sunsite.dk/RFC/rfc/rfc2617.html>:
3.5 Example
The following example assumes that an access-protected document is
being requested from the server via a GET request. The URI of the
document is "
http://www.nowhere.org/dir/index.html". Both client and
server know that the username for this document is "Mufasa", and the
password is "Circle Of Life" (with one space between each of the
three words).
The first time the client requests the document, no Authorization
header is sent, so the server responds with:
HTTP/1.1 401 Unauthorized
WWW-Authenticate: Digest
realm="testrealm@host.com",
qop="auth,auth-int",
nonce="dcd98b7102dd2f0e8b11d0f600bfb0c093",
opaque="5ccc069c403ebaf9f0171e9517f40e41"
The client may prompt the user for the username and password, after
which it will respond with a new request, including the following
Authorization header:
Authorization: Digest username="Mufasa",
realm="testrealm@host.com",
nonce="dcd98b7102dd2f0e8b11d0f600bfb0c093",
uri="/dir/index.html",
qop=auth,
nc=00000001,
cnonce="0a4f113b",
response="6629fae49393a05397450978507c4ef1",
opaque="5ccc069c403ebaf9f0171e9517f40e41"
--
Christian Jørgensen | "Ford, you're turning into a penguin"
http://www.razor.dk | "Stop it"