php coders : need a little help

[flashfreak]

How can I retrieve the username : password from a paysite members area in PHP?
I want to make a protection script, pls help.

Thanks!

[Libertine]

Ehm... what exactly do you mean by retrieve?
Retrieve it from the .htpasswd file, from a database or from the user?

[nuclei]

in php $_SERVER[PHP_AUTH_USER] will get you the username. You then would have to open the password file to get the "encrupted" password. If the password is stored in mysql somewhere then you can retrieve the unencrypted pass from there using the username you now have.

[nuclei]

Originally posted by nuclei
in php $_SERVER[PHP_AUTH_USER] will get you the username. You then would have to open the password file to get the "encrypted" password. If the password is stored in mysql somewhere then you can retrieve the unencrypted pass from there using the username you now have.

[nuclei]

well hell, that was sposed to be an Edit to change encrupted to encrypted....


must be getting early or late

[flashfreak]

Originally posted by punkworld
Ehm... what exactly do you mean by retrieve?
Retrieve it from the .htpasswd file, from a database or from the user?

if that helps: the members area is ccbill protected.. I don't know how they store the username : password...

[flashfreak]

Originally posted by nuclei
in php $_SERVER[PHP_AUTH_USER] will get you the username. You then would have to open the password file to get the "encrupted" password. If the password is stored in mysql somewhere then you can retrieve the unencrypted pass from there using the username you now have.

thanks, I'l try that.. after all I don't need the password, since usernames are unique. I'm trying to protect the members area from password listing sites, so the user doesn't log from 3 different IPs in 3 hours... stuff like this...

[sneaker]

Look for a htaccess auth class module for php, there are a few out there try www.phpclasses.org

[nuclei]

Originally posted by flashfreak

thanks, I'l try that.. after all I don't need the password, since usernames are unique. I'm trying to protect the members area from password listing sites, so the user doesn't log from 3 different IPs in 3 hours... stuff like this...

welcome.