Solved

How can I produce a custom authentication module for Apache httpd?

Posted on 2007-11-16
1
626 Views
Last Modified: 2012-06-27
I need a custom authentication module for Apache that will  put up a  customized authentication dialogue.  The existing authentication modules cause the browser to pop up a username/password dialogue, which is fine for what it is intended to do, but I would like to do something that only asks for a password, and does so as part of a page that is big enough to provide a paragraph of documentation and a link to  more detailed documentation.

At present, I'm faking it with
DirectoryIndex index.html index.php
in my apache config, so that index.html  has priority over index.php., and I have written an index.html which contains an html form that invokes a PHP action routine which verifies the password and then invokes the web app (named index.php) if the password is OK. Below the form I have a link to the user manual for the web app.

This looks nice, as I used Dreamweaver to surround the the form with some nice eye candy, but the security  level is not very good. Anybody who can find out or  guess the name of the subdirectory in which the web app lives can invoke it.

How can I produce  (or find) an authentication module that will put up the same screen?
0
Comment
Question by:jdgressett
1 Comment
 
LVL 3

Accepted Solution

by:
kylealanhale earned 500 total points
ID: 20303555
You're going about it all the wrong way.  The basic apache authentication is handled by the browser, so you can't control what that popup looks like.  If that doesn't do it for you, you need to do some research on a few things:

PHP session handling
PHP security
SSL

There is no quick way to do this really.. but if you do some googling on at least the first two topics, you'll get a much more secure solution.  If you want to implement a Secure HTTP solution, you'll need to research the third.

Here's a fairly good little tutorial:

http://www.trap17.com/forums/php-simple-login-tutorial-t7887.html
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you've heard about htaccess and it sounds like it does what you want, but you're not sure how it works... well, you're in the right place. Read on. Some Basics #1. It's a file and its filename is .htaccess (yes, with a dot in the front). #…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question