userid/password

[wheel]

I've got an app I'd like to password protect; information in the database is somewhat sensitive.

Am I correct in thinking that the htaccess password system is more secure than anything I'd likely develop in php? In other words - is that the best userid/password system to use?

And if so, can a php program get access to what user signed in through the htaccess password system?

[jdMorgan]

Most secure? -- I don't know. I would think that the PHP vulnerabilities would be more to consider.

REMOTE_USER might give you what you're looking for... Try it to make sure that var is script-accessible, and that it is reliable.

Jim