how do i make the htpasswd non-case sensitive?

login help

[slygrrl22]

Id like to make the login so that the username & password are NOT case sensitive. Can anyone help me with this?

[jdMorgan]

slygrrl22,

Welcome to WebmasterWorld [webmasterworld.com]!

Using Apache basic authorization, I'm afraid you can't make it case-insensitive. Apache mod_auth is intentionally case-sensitive, because treating usernames and passwords as case-insensitive makes systems much easier to hack into using a dictionary attack or sequential-guessing approach.

If you really want to use case-insensitive passwords, I think you'll need to write or buy a custom script to handle your authorization.

Jim

[slygrrl22]

i heard that there is a PHP code to get around this problem. would you be able to tell me / or show me where i can read more about it?

[jdMorgan]

Yes, try over in our PHP forum [webmasterworld.com] for PHP-specific recommendations.

Jim

[slygrrl22]

K THANKS!