authenticating

using headers and apache

[John_Keates]

hey,

I'd like to make some authentication system for a web dir using php. Like the Directory directive in apache where you just set the auth type and it's locked. Is this possible to do with php? I don't want to use sessions of coockies but just make php tell apache to ask for authentication without havinf to set it in the httpd.conf. So I keep a user database managed with php but have apache do the authentication stuff. Is that possible to do?

[jc_armor]

[us3.php.net...]

[John_Keates]

That's what I know was possible, but the problem is when someone tries
/protected/index.php it will get the message, but /protected/files/ won't be guarded. Apache will do the whole dir, and php just one file. I need something like apache's athentication but manage the user names and passwords in a mysql database. htpasswd is now used to create a static database but I need it to be managed by a php script.

[jatar_k]

then why not just an auth file that has the user pass in it. have each file you want to protect include that file and if the user/pass doesn't match fire them off to a login page.

[John_Keates]

I don't need protection for pages, but for files. Like Downloads. I just wanted to know if php can manage apache's authentication system, but I think it can't.