HTML PHP login authentication

Question

I need a simple login authentication for my beta site. This is what I found and I put it in my index.php (Joomla 2.5):

<?
//-- login
if ($_SERVER["PHP_AUTH_USER"] != "USERNAME" || $_SERVER["PHP_AUTH_PW"] != "PASSWORD")
{

    header("WWW-Authenticate: Basic realm=\"Enter username and password to proceed\"");  
    header("HTTP/1.0 401 Unauthorized");

    echo "<h1>Authentication failed</h1>";
}    
else
{
    echo "<h1>Authentication succeeded</h1>";
}
?>

The php login "pop-up" is showing perfect but when I click "cancel login" my website will be loaded anyway.

How can I prevent loading my website?

toomanyredirects · Accepted Answer · 2013-02-19 23:04:44Z

2

You should have a die(); after the echo "<h1>Authentication failed</h1>"; to stop any more of the code being processed.

edited Feb 19, 2013 at 23:04

answered Feb 19, 2013 at 22:53

toomanyredirects

2,00216 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Jonathan Kuhn Over a year ago

the || is just fine because he is checking if the username/password != the strings. meaning that if either one doesn't match, "authentication failed". using && would mean they both need to not match to fail.

Collectives™ on Stack Overflow

HTML PHP login authentication

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related