How to fill user/pass field of a prompted form with php?

**Atli** · May 1 '10, 06:24 PM

Hey.

I don't think this is possible, no. The password protection is most likely at the HTTP server level, which happens before any PHP code is executed. The request needs to include the authentication info, which is not something PHP can circumvent.

There is one idea I can offer you; something that might at least prevent people simply linking to things like images or videos on your server. This is by no means bulletproof, though.

You could use a server-side session to keep track of whether the requester has actually accessed a page on your website before sending the request for the resource, and if he has not you can deny access. To do that, you would simply add two lines to the top of your scripts that would register a session variable.
For example:
[code=php]<?php
session_start() ;
$_SESSION['isEnabled'] = true;
?>
<html>
<head><title>Ho tlinking test</title></head>
<body>
<h1>Image!</h1>
<img src="logo.png" alt="Logo!" title="A logo">
</body>
</html>[/code]

Then you would pass all requested images through a .htaccess filter that would, rather than serve the requested image, redirect it to a PHP script:
[code=htaccess]RewriteEngine On
RewriteRule ^(.*\.(jpe?g|gi f|png))$ getContent.php? file=$1&nothing[/code]
(Note, the "&nothing" is there just to prevent a loop, as the rule would also match the redirected URL without it.)

The PHP script, "getContent.php ", would then verify that the session element has been register before serving the image. If it has not, it either just gives a 404 error or some other non-content.
For example:
[code=php]<?php
session_start() ;
define('CONTENT _ROOT', 'files/');

if(isset($_SESS ION['isEnabled']) && isset($_GET['file']))
{
$filename = $_GET['file'];
$filePath = CONTENT_ROOT . $filename;
if(!file_exists ($filePath) || !is_file($fileP ath))
{
send_image(CONT ENT_ROOT . '404.png');
}
else
{
if(!send_image( $filePath))
{
send_image(CONT ENT_ROOT . '404.png');
}
}
}
else
{
send_image(CONT ENT_ROOT . 'denied.png');
}

/**
* Sends an image to the output buffer.
* Note, this can not be called more than once,
* and can not be called after ANY other output.
* @param $path The location of the image to send.
*/
function send_image($pat h)
{
$data = getimagesize($p ath);
if(!$data) {
return false;
}
header('Content-type: '. $data['mime']);
header('Content-length: ' . filesize($path) );
readfile($path) ;

return true;
}
?>[/code]

**Zarich** · May 1 '10, 10:55 PM

Oh, i get what u mean, since its a server function it should be executed before any php could be loaded. Now your idea seems interesting, correct me if im wrong on this; ill add the first piece of code to all my php files so they all have active sessions, then the htaccces, then the last part is a script that would register the image based on the getimagesize parameter. Well now how would i be able to do that with mp4 videos since the getimagesize won't work there (at least i think so), After all im just a Newbie at php and thats why i ask for help. Btw since we will be using htaccess here im not sure if it will work, because the thing is firefox completly bypass the htaccess protecion when hotlinking a video on a embedded .swf.
More info about this issue at http://www.longtailvideo.com/support...m-with-firefox

Anyways at least i can try with the code you gave me, but help me out to modify it to work with .mp4 videos if it is capable to.

Another question in case this won`t work, is it possible to protect folders with a password in php?, i have seen i can protect webpages but not the folders, but if is possible it would do the thing.

Well i really appreciate your help and spending some time in your answer, you are the man =P.

Cya

**Zarich** · May 5 '10, 03:49 AM

I was Able to do it with httaccess cookies =D, so if u have problemes with hotlinking and videos you gotta do that.

How to fill user/pass field of a prompted form with php?

How to fill user/pass field of a prompted form with php?

Comment

Comment

Comment