php authentication - any experiences/recommendations?

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • Alex Hunsley

    #1

    php authentication - any experiences/recommendations?

    I'm looking for a php authentication library/class to control access to
    certain web pages on a web site. (Access controlled by username/pwd...)

    There's several I've seen out there, like


    http://sourceforge.net/projects/auth/
    ttp://freshmeat.net/projects/phpauthenticati on/

    ... I'm just wondering if anyone has any particular recommendations or
    unrecommendatio ns.... I don't have a huge list of technical
    requirements, although it being able to work with a standard php setup
    would be nice (version 4 or 5) (i.e. avoid recompiling etc.)

    (Btw, requirements currently are that users don't have to be able to
    register themselves on the site; admin will make new accounts for now,
    although it would maybe be handy to do that later.)

    thanks,
    alex
  • Alex Hunsley

    #2
    Re: php authentication - any experiences/recommendations ?

    Alex Hunsley wrote:[color=blue]
    > I'm looking for a php authentication library/class to control access to
    > certain web pages on a web site. (Access controlled by username/pwd...)
    >
    > There's several I've seen out there, like
    >
    > http://php.rufy.com/
    > http://sourceforge.net/projects/auth/
    > ttp://freshmeat.net/projects/phpauthenticati on/
    >
    > .. I'm just wondering if anyone has any particular recommendations or
    > unrecommendatio ns.... I don't have a huge list of technical
    > requirements, although it being able to work with a standard php setup
    > would be nice (version 4 or 5) (i.e. avoid recompiling etc.)
    >
    > (Btw, requirements currently are that users don't have to be able to
    > register themselves on the site; admin will make new accounts for now,
    > although it would maybe be handy to do that later.)
    >
    > thanks,
    > alex[/color]

    p.s. there will be a MySQL database available as well for storing
    credentials, if necessary...

    alex

    Comment

    • Chung Leong

      #3
      Re: php authentication - any experiences/recommendations ?


      "Alex Hunsley" <lard@tardis.ed .ac.molar.uk> wrote in message
      news:gcz_d.8647 4$Bk7.76522@fe1 .news.blueyonde r.co.uk...[color=blue]
      > I'm looking for a php authentication library/class to control access to
      > certain web pages on a web site. (Access controlled by username/pwd...)[/color]

      Authentication is easy. In most cases, it is just a matter of comparing a
      login name and password against what's stored in the database,

      The trickier part is authorization, that is, determining who can do what.

      I would say that it is better to implement the authentication mechanism
      yoursef, given that it's such an integrated part of your application.


      Comment

      • nospam@geniegate.com

        #4
        Re: php authentication - any experiences/recommendations ?

        In: <gcz_d.86474$Bk 7.76522@fe1.new s.blueyonder.co .uk>, Alex Hunsley <lard@tardis.ed .ac.molar.uk> wrote:[color=blue]
        >I'm looking for a php authentication library/class to control access to
        >certain web pages on a web site. (Access controlled by username/pwd...)
        >
        >... I'm just wondering if anyone has any particular recommendations or
        >unrecommendati ons.... I don't have a huge list of technical
        >requirements , although it being able to work with a standard php setup
        >would be nice (version 4 or 5) (i.e. avoid recompiling etc.)
        >
        >(Btw, requirements currently are that users don't have to be able to
        >register themselves on the site; admin will make new accounts for now,
        >although it would maybe be handy to do that later.)[/color]

        My package might work for you, it's free with an ad link, but you can take
        that off if you donate (or have donated in the past) to the tsunami
        relief efforts.

        Thats it's only requirements. I've never asked anyone to supply proof, so if
        you lost the receipt, it's OK. I figure there will be a few that "cheat", but
        most people won't and that's good enough for me. :-) )

        It's at http://www.geniegate.com/

        I wouldn't use it in a high security area, for instance, it's not suitable
        for use in bank accounts and such because it has a "send password" feature
        that could be intercepted through email.

        Suitable for basic membership sites though, it's designed with a "Login API"
        for applications to use, it also works with vanilla HTTP authentication.

        Jamie
        --
        http://www.geniegate.com Custom web programming
        guhzo_42@lnubb. pbz (rot13) User Management Solutions

        Comment

        Working...