Forum Moderators: phranque

Message Too Old, No Replies

Workplaces blocking authentication

         

Frank_Rizzo

12:15 pm on Jan 4, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Some workplaces ban complete domains or IP's from being accessed at work but there are some which allow access to a site but prevent employees from logining in to password protected directories such as members areas (using .htaccess authenticaion).

e.g. Joe is at work and visits his favourite widgets.com site. The workplace does not block this and Joe is able to open any public page. However, Joe tries to access the members area but the workplace prevents this.

What is being blocked, and what can webmasters do to allow members to login from work?

jdMorgan

12:39 am on Jan 9, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



This was a puzzler.

They may be blocking the authentication header sent by the browser with each request after login. If that's how they are doing it, then you could try allowing access if the auth header is present OR a cookie is present in the request. Of course, the employer could block cookies, too.

Jim

Frank_Rizzo

11:01 am on Jan 9, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I'll try setting up a php login page rather than use the browsers. See if php can authenticate.

Cheers.