php authentication - any experiences/recommendations?

[Alex Hunsley]

I'm looking for a php authentication library/class to control access to
certain web pages on a web site. (Access controlled by username/pwd...)

There's several I've seen out there, like

http://php.rufy.com/
http://sourceforge.net/projects/auth/
ttp://freshmeat.net/projects/phpauthentication/

... I'm just wondering if anyone has any particular recommendations or
unrecommendations.... I don't have a huge list of technical
requirements, although it being able to work with a standard php setup
would be nice (version 4 or 5) (i.e. avoid recompiling etc.)

(Btw, requirements currently are that users don't have to be able to
register themselves on the site; admin will make new accounts for now,
although it would maybe be handy to do that later.)

thanks,
alex

[Alex Hunsley]

Alex Hunsley wrote:

I'm looking for a php authentication library/class to control access to
certain web pages on a web site. (Access controlled by username/pwd...)

There's several I've seen out there, like

http://php.rufy.com/
http://sourceforge.net/projects/auth/
ttp://freshmeat.net/projects/phpauthentication/

.. I'm just wondering if anyone has any particular recommendations or
unrecommendations.... I don't have a huge list of technical
requirements, although it being able to work with a standard php setup
would be nice (version 4 or 5) (i.e. avoid recompiling etc.)

(Btw, requirements currently are that users don't have to be able to
register themselves on the site; admin will make new accounts for now,
although it would maybe be handy to do that later.)

thanks,
alex

p.s. there will be a MySQL database available as well for storing
credentials, if necessary...

alex

[Chung Leong]

"Alex Hunsley" <la**@tardis.ed.ac.molar.uk> wrote in message
news:gc*******************@fe1.news.blueyonder.co. uk...

I'm looking for a php authentication library/class to control access to
certain web pages on a web site. (Access controlled by username/pwd...)

Authentication is easy. In most cases, it is just a matter of comparing a
login name and password against what's stored in the database,

The trickier part is authorization, that is, determining who can do what.

I would say that it is better to implement the authentication mechanism
yoursef, given that it's such an integrated part of your application.

[nospam]

In: <gc*******************@fe1.news.blueyonder.co.uk >, Alex Hunsley <la**@tardis.ed.ac.molar.uk> wrote:

I'm looking for a php authentication library/class to control access to
certain web pages on a web site. (Access controlled by username/pwd...)

... I'm just wondering if anyone has any particular recommendations or
unrecommendations.... I don't have a huge list of technical
requirements, although it being able to work with a standard php setup
would be nice (version 4 or 5) (i.e. avoid recompiling etc.)

(Btw, requirements currently are that users don't have to be able to
register themselves on the site; admin will make new accounts for now,
although it would maybe be handy to do that later.)

My package might work for you, it's free with an ad link, but you can take
that off if you donate (or have donated in the past) to the tsunami
relief efforts.

Thats it's only requirements. I've never asked anyone to supply proof, so if
you lost the receipt, it's OK. I figure there will be a few that "cheat", but
most people won't and that's good enough for me. :-) )

It's at http://www.geniegate.com/

I wouldn't use it in a high security area, for instance, it's not suitable
for use in bank accounts and such because it has a "send password" feature
that could be intercepted through email.

Suitable for basic membership sites though, it's designed with a "Login API"
for applications to use, it also works with vanilla HTTP authentication.

Jamie
--
http://www.geniegate.com Custom web programming
gu******@lnubb.pbz (rot13) User Management Solutions