开发者

Redirect to page with .htaccess password

Is it 开发者_Python百科possible to redirect a 'person' to a folder on a website which is protected by a passworded .htaccess.

Possibly by the use of php or otherwise, other than the "http://user:pwd@web.site" way?

Or is it best just to script your own folder/file view of these protected areas.


Most browsers will issue warnings about the embedded username/password, as that sort of link has been traditionally abused by spammers to cloak their penis pill URLs behind "normal looking" links.

If you want to do an automatic login, redirect with an encrypted token of some sort that the protected site can decrypt and grant/deny access based on that.

In bare-bones form:

$raw_token = array('username' => 'joe', 'password' => '123', 'coming_from' => 'yoursite.com');
$crypted_token = base64_encode(do_some_encryption(json_encode($raw_token), 'the passphrase'));

header("Location: http://othersite.com?token=$crypted_token")

and then on the receiving end:

$crypted_token = $_GET['token'];
$raw_token = json_decode(do_some_decryption(base64_decode($crypted_token), 'the passphrase'));

$username = $raw_token['username'];
$password = $raw_token['password'];

do_login($username, $password);
0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜