This works really well for one page:
<?
header(“Expires: Sat, 01 Jan 2000 00:00:00 GMT”);
header(“Last-Modified: “.gmdate(“D, d M Y H:i:s”).” GMT”);
header(“Cache-Control: post-check=0, pre-check=0″,false);
header(“Pragma: no-cache”);
session_cache_limiter(“public, no-store”);
session_start();
function auth_user() {
$realm = mt_rand( 1, 1000000000 );
header(‘WWW-Authenticate: Basic realm=”Protected:[ID'.$realm.']“‘);
header(‘HTTP/1.0 401 Unauthorized’);
die(“Unauthorized access forbidden!”);
}
if(isset($_GET['logout'])) {
auth_user();
}
if (!isset($_SERVER['PHP_AUTH_USER'])) {
auth_user();
} else if (!isset($_SERVER['PHP_AUTH_PW'])) {
auth_user();
}
echo “pass = “.$_SERVER['PHP_AUTH_PW'].”
“;
mysql_connect(“localhost”, “root”);
mysql_select_db(“database”);
$validate_sql = “SELECT Username, PasswordĂ‚
FROM user WHERE Username = ‘”.$_SERVER['PHP_AUTH_USER'].”‘
AND Password = ‘”.$_SERVER['PHP_AUTH_PW'].”‘”;
if(!$validate_qry = mysql_query($validate_sql)){
die(mysql_error());
}
if(mysql_num_rows($validate_qry) < 1) {
if($_SERVER['PHP_AUTH_USER'] == “logout”) {
// message for firefox
die(“You have successfully logged out.”);
} else {
auth_user();
}
}
echo “You are now logged in
“;
if (ereg(“MSIE”, $_SERVER['HTTP_USER_AGENT'])) {
// Use basic logout
echo “<a href=\”".$_SERVER['PHP_SELF'].”?logout=y\”>Logout</a>”;
} else {
// use other logout for Firefox and other browsers
echo “<a href=\”<a href=”http://logout:logout/”>http://logout:logout</a>@”.
$_SERVER['SERVER_NAME'].”/”.$_SERVER['PHP_SELF'].”\”>Logout</a>”;
}
?>