Solved

How can I produce a custom authentication module for Apache httpd?

Posted on 2007-11-16
1
629 Views
Last Modified: 2012-06-27
I need a custom authentication module for Apache that will  put up a  customized authentication dialogue.  The existing authentication modules cause the browser to pop up a username/password dialogue, which is fine for what it is intended to do, but I would like to do something that only asks for a password, and does so as part of a page that is big enough to provide a paragraph of documentation and a link to  more detailed documentation.

At present, I'm faking it with
DirectoryIndex index.html index.php
in my apache config, so that index.html  has priority over index.php., and I have written an index.html which contains an html form that invokes a PHP action routine which verifies the password and then invokes the web app (named index.php) if the password is OK. Below the form I have a link to the user manual for the web app.

This looks nice, as I used Dreamweaver to surround the the form with some nice eye candy, but the security  level is not very good. Anybody who can find out or  guess the name of the subdirectory in which the web app lives can invoke it.

How can I produce  (or find) an authentication module that will put up the same screen?
0
Comment
Question by:jdgressett
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 3

Accepted Solution

by:
kylealanhale earned 500 total points
ID: 20303555
You're going about it all the wrong way.  The basic apache authentication is handled by the browser, so you can't control what that popup looks like.  If that doesn't do it for you, you need to do some research on a few things:

PHP session handling
PHP security
SSL

There is no quick way to do this really.. but if you do some googling on at least the first two topics, you'll get a much more secure solution.  If you want to implement a Secure HTTP solution, you'll need to research the third.

Here's a fairly good little tutorial:

http://www.trap17.com/forums/php-simple-login-tutorial-t7887.html
0

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
XAMPP 3 74
Problem to go to page 12 111
Bulk Changes to WP permalinks in .htaccess - blog post only 4 132
AWS EC2 & RDS Instance 5 64
If you are running a LAMP infrastructure, this little code snippet is very helpful if you are serving lots of HTML, JavaScript and CSS-related information. The mod_deflate module, which is part of the Apache 2.2 application, provides the DEFLATE…
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question