Forum Moderators: coopster

Message Too Old, No Replies

PHP or .htaccess Password Protection?

         

TravelSite

4:08 pm on May 4, 2006 (gmt 0)

10+ Year Member



Which is the most secure techology for password protecting parts of your site - .htaccess or php (usernames/passwords in mysql table)?

jatar_k

4:22 pm on May 4, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



that would depend on what you are trying to protect and how many users are gaining access

TravelSite

11:24 pm on May 4, 2006 (gmt 0)

10+ Year Member



It would be for access to an admin area for staff to update offers.

coopster

2:15 pm on May 8, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Using per-directory configuration files (.htaccess) is Basic Authentication [httpd.apache.org]. Plain text passwords are being transferred with each request. The Apache 1.3 "How To" link is a good primer as well:

[httpd.apache.org...]