- To: Peter Faulks <peter@xxxxxxxxxxxxxxx>
- Subject: Re: [chat] On-the-fly user authentication
- From: Dopey <matth@xxxxxxxxxxxxxxx>
- Date: Mon Jul 2 11:56:01 2001
- Cc: SLUG chat <slug-chat@xxxxxxxxxxx>
- Organization: Computing Students Society (COMPSOC), University of New South Wales.
On Sun, 01 Jul 2001, Peter Faulks <peter@xxxxxxxxxxxxxxx> wrote...
| What I need is a way to add a session generated user/password
| automagically so I can have basic HTTP authenication JUST FOR THAT
| SESSION so I can pass a URI for a file name to d/l. The user/password
| should expire (ie be removed) after (say) 15mins.
| Any clues as to how I could achive this in a non-server specific manner?
| London to a brick it would be Apache, but no guarantees about which
| modules are going to be available.
If you were doing this in PHP, it should be fairly easy - its possible to
set it up so that a php script authenticates the basic http
authentication.
Hmm, idea two - have your cgi create user/password entries in the
appropriate user list (from .htaccess or similar) and have a regular
cleanup script on a crontab job.
Thinking about it, I've seen more cases where people use that second
method rather than the first, but the first method can be easier if you
have PHP set up properly.
/dopey