PHP网页安全认证的实例详解

PHP网页安全认证的实例详解 不基于数据库：<?php//unset($_SERVER['PHP_AUTH_USER']);$strAuthUs

PHP网页安全认证的实例详解

 不基于数据库：

<?php
 //unset($_SERVER['PHP_AUTH_USER']);
 $strAuthUser= $_SERVER['PHP_AUTH_USER']; 
 $strAuthPass= $_SERVER['PHP_AUTH_PW'];

 if (! ($strAuthUser == "a" && $strAuthPass == "a")) {
 header('WWW-Authenticate: Basic realm="wly"');
 header('HTTP/1.0 401 Unauthorized');
 echo "用户验证!!";
 exit;
 } else {
 echo "验证通过";
 
 header("location:http://www.baidu.com");
 //unset($_SERVER['PHP_AUTH_USER']); 
 }
?>

基于数据库：

<?php
 function authenticate_user() {
 header('WWW-Authenticate: Basic realm="Secret Stash"');
 header("HTTP/1.0 401 Unauthorized");
 exit;
 }
 
 if (! isset($_SERVER['PHP_AUTH_USER'])) {
 authenticate_user();
 } else {
 mysql_pconnect("localhost","authenticator","secret") or die("Can't connect to database server!");
 mysql_select_db("java2s") or die("Can't select authentication database!");
 
 $query = "SELECT username, pswd FROM user WHERE username='$_SERVER[PHP_AUTH_USER]' AND pswd=MD5('$_SERVER[PHP_AUTH_PW]')";
 
 $result = mysql_query($query);
 
 // If nothing was found, reprompt the user for the login information.
 if (mysql_num_rows($result) == 0) {
 authenticate_user();
 }
 }
 ?>

如有疑问请留言或者到本站社区交流讨论，感谢阅读，希望能帮助到大家，谢谢大家对本站的支持！

PHP网页安全 PHP网页安全认证的两种方法