[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] .htaccess question



Florian,


> Hello,
>
> some services who authenticiate via .htaccess offer the option to log
> out again. Meaning, you click on "Logout" and the next time you visit
> the site, the user information from the browser cache is not re-read,
> so you have to enter it again.

Are you sure they are using the Apache .htaccess method?  I can send the
same auth challenge using php, authenticate the user against a datbase, then
store a magic cookie on the users computer that says they're logged in.
When they click the logout button, simply delete the cookie.  This could be
accomplised using JavaScript too (the cookie handling part).

--
Brian