Solved

How can I produce a custom authentication module for Apache httpd?

Posted on 2007-11-16
1
628 Views
Last Modified: 2012-06-27
I need a custom authentication module for Apache that will  put up a  customized authentication dialogue.  The existing authentication modules cause the browser to pop up a username/password dialogue, which is fine for what it is intended to do, but I would like to do something that only asks for a password, and does so as part of a page that is big enough to provide a paragraph of documentation and a link to  more detailed documentation.

At present, I'm faking it with
DirectoryIndex index.html index.php
in my apache config, so that index.html  has priority over index.php., and I have written an index.html which contains an html form that invokes a PHP action routine which verifies the password and then invokes the web app (named index.php) if the password is OK. Below the form I have a link to the user manual for the web app.

This looks nice, as I used Dreamweaver to surround the the form with some nice eye candy, but the security  level is not very good. Anybody who can find out or  guess the name of the subdirectory in which the web app lives can invoke it.

How can I produce  (or find) an authentication module that will put up the same screen?
0
Comment
Question by:jdgressett
1 Comment
 
LVL 3

Accepted Solution

by:
kylealanhale earned 500 total points
ID: 20303555
You're going about it all the wrong way.  The basic apache authentication is handled by the browser, so you can't control what that popup looks like.  If that doesn't do it for you, you need to do some research on a few things:

PHP session handling
PHP security
SSL

There is no quick way to do this really.. but if you do some googling on at least the first two topics, you'll get a much more secure solution.  If you want to implement a Secure HTTP solution, you'll need to research the third.

Here's a fairly good little tutorial:

http://www.trap17.com/forums/php-simple-login-tutorial-t7887.html
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
transferring settings for apache and mysql 2 93
file path 14 71
development site is indexed by google even though behind htpasswd 7 69
AWS EC2 & RDS Instance 5 50
Introduction As you’re probably aware the HTTP protocol offers basic / weak authentication, which in combination with the relevant configuration on your web server, provides the ability to password protect all or part of your host.  If you were not…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question