We have a website (Domain B) that is completely protected with http authentication (.htaccess with AuthType Basic). We would like to have a username/password html form on Domain A that posts to Domain B and bypasses the Username/Password prompt. The old way of
http://username:password@domain.com is not allowed any more by Internet Explorer for phishing reasons...
This is what ive come up with so far...
Create a non-protected subdirectory on Domain B that has a script that sets the $_SERVER["PHP_AUTH_USER"] and $_SERVER["PHP_AUTH_PW"] than redirects to the home page... which in theory authorization will check those varaiables first (Are these variables read-only?).
Problem: Cannot create a sub-directory that does not request authentication (Ive tried "Satisfy Any" and other directives in the subfolder's .htaccess).
Is there anything else I could be doing? And if not, am I going down the right path?
FYI, both servers are running on LAMP.
Start Free Trial
