I don't think it is easy to steal the password by using PHP_AUTH_PW.
PHP_AUTH_PW is cached in the browser, if you exit the browser, nobody can
steal it. If the other people is using a different browser, there is no way
for him to steal it even if he is accessing the same URL.
Just my understa
On Fri, 26 Jan 2001 17:36:57 -0600, Richard Lynch <[EMAIL PROTECTED]>
wrote :
> > I am currently using Apache-1.3.14 with php-4.0.4pl1 compiled
> statically
> > into it and running on RedHat Linux 6.2 . Apache is configured
> to do
> > authentication for certain URLs via a auth_ldap module which
> I am currently using Apache-1.3.14 with php-4.0.4pl1 compiled statically
> into it and running on RedHat Linux 6.2 . Apache is configured to do
> authentication for certain URLs via a auth_ldap module which is
> dynamically loaded when Apache starts.
>
> I noticed that when I access the protecte
3 matches
Mail list logo