RE: [cobalt-developers] .htaccess login with perl or php...

["Hosting Sales" <hosting@xxxxxxxxxxx>]

> -----Original Message-----
> From: cobalt-developers-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-developers-
> admin@xxxxxxxxxxxxxxx] On Behalf Of Rob Johnson
> Sent: Wednesday, November 28, 2001 2:41 PM
> To: cobalt-developers@xxxxxxxxxxxxxxx
> Subject: [cobalt-developers] .htaccess login with perl or php...
> 
> 
> 
> Hi,
> 
> I want to allow users to log in to their control panel using a html
form
> on
> the main page.  One way i can accomplish this is, after validating the
> login
> info, forward  them to
> http://username:password@xxxxxxxxxxxxx/path_to_their_control_panel .
> This,
> however, is sloppy and insecure.  I don't want to display their login
info
> in the url.  Is there a better way to do this? i would think thered be
a
> header i can send with the login info but i can't find anything
regarding
> this on google (other than the method above)...
> 

The best method is to just use a link on the main page (no login
required) to the control panel page, then have them logon there.  If you
want them to logon to the main page and then be able to link to other
pages (including the control panel page) without further logon dialogs,
simply use the same domain identifier in the .htaccess files on all
relevant pages.  Then once a login has been done (in a single session),
it will be effective for all pages with the same domain.

Jack