HTTP authentication

PHP kode 

 <?php
 $username = 'admin';
 $password = 'letmein';
  
 if ($_SERVER['PHP_AUTH_USER'] !== $username || $_SERVER['PHP_AUTH_PW']   !== $password) {
     header('WWW-Authenticate: Basic realm="Restricted Section"');
     header('HTTP/1.0 401 Unauthorized');
     die ("Please enter your username and password");
 } else {
     echo "Yay";
 }
 ?>

Kode 

The security in modern browsers is getting stricter and has reached a
point where you may not easily be able to test HTTP authentication on
a local filesystem unless you alter your browser’s settings. This is to
protect you from potentially malicious files you may download from the
Internet (since local files generally pose greater security risks). Instead,
if you wish to write code that uses this type of authentication, this is one
instance where you may prefer to perform your testing on a remote
server using an Internet connection.

Kode 

PHP Version 5.4.11

Zend Server Version: 6.0.1
Zend Framework: 1.12.3, 2.1.4
Zend Server Gateway: 0.9.0.201301302347
Build: 69400

System	Windows NT ANDREAS-PC 6.1 build 7601 (Windows 7 Home Premium Edition Service Pack 1) i586
Build Date	Feb 12 2013 14:07:24
Compiler	MSVC9 (Visual C++ 2008)
Architecture	x86
Configure Command	cscript /nologo configure.js "--disable-phar" "--disable-ipv6" "--disable-zts" "--disable-bcmath" "--disable-calendar" "--disable-odbc" "--disable-tokenizer" "--without-wddx" "--enable-debug-pack" "--enable-cli-win32" "--enable-pdo" "--enable-xmlreader" "--enable-xmlwriter" "--enable-cgi" "--with-php-build" "--with-libxml" "--with-pdo-sqlite" "--with-openssl" "--with-sqlite3"
Server API	CGI/FastCGI
Virtual Directory Support	disabled
Configuration File (php.ini) Path	C:\Windows
Loaded Configuration File	C:\Program Files (x86)\Zend\ZendServer\etc\php.ini
Scan this dir for additional .ini files	(none)
Additional .ini files parsed	(none)
PHP API	20100412
PHP Extension	20100525
Zend Extension	220100525
Zend Extension Build	API220100525,NTS,VC9
PHP Extension Build	API20100525,NTS,VC9
Debug Build	no
Thread Safety	disabled
Zend Signal Handling	disabled
Zend Memory Manager	enabled
Zend Multibyte Support	provided by mbstring
IPv6 Support	disabled
DTrace Support	disabled
Registered PHP Streams	https, ftps, php, file, glob, data, http, ftp, zip, compress.zlib, compress.bzip2, phar
Registered Stream Socket Transports	tcp, udp, ssl, sslv3, sslv2, tls
Registered Stream Filters	convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk, zlib.*, bzip2.*, mcrypt.*, mdecrypt.*

PHP kode 

 <?php
  $username = 'admin';
  $password = 'letmein';
   
  if ($_SERVER['PHP_AUTH_USER'] !== $username || $_SERVER['PHP_AUTH_PW']   !== $password) {
      header('WWW-Authenticate: Basic realm="Restricted Section"');
      header('HTTP/1.0 401 Unauthorized');
      echo "You entered: '" . $_SERVER['PHP_AUTH_USER'] . "'/'" . $_SERVER['PHP_AUTH_PW'] . "'";
  } else {
      echo "Yay";
  }
  ?>

PHP kode 

 echo "You entered: '" . $_SERVER['PHP_AUTH_USER'] . "'/'" . $_SERVER['PHP_AUTH_PW'] . "'";