i2-Services, Inc. Forums

Is it possible to put the login spaces on a webpage instead of using the popup window when using the Password Manager? Or is something else required?

Hi,

The .htaccess protection method requires the browser pop-up window to authenticate the user. Its done between the browser & server. Not a CGI script protecting the documents. The CGI script manages the .htaccess password & group files.

Our PHP Solution @:

http://www.interactive-scripts.com/php_mm/

Can allow you to protect an entire folder & not use the .htaccess login window / prompt.

Hope this helps explain things.

Thanks

Thank you !

How does the security of the "mod_rewrite" method used in your PHP Membership Manager compare to the ".htaccess" method used in your Password Manager?

Would I be able to transfer all the data (not a lot of records but a lot of fields per record) from my Password Manager to a PHP Membership Manager?

Instead of the regular process using .htaccess of it looking up the account via a .passwords file it checks the SQL database for the account and sets a browser session which keeps you logged in while viewing specific folders/files. You also have a log-out feature not available with .htaccess (browser close only).

PHP Membership Manager does have an import tool. If you're looking to import custom fields you would be better off using a import tool such as PHP MyAdmin. Which we can help you with.

Contact us at our help desk if you have further questions on this process. Thanks!

I use the memebrship manager and started off with .htaccess, but have since changed it to mod_rewrite.
Its a lot cleaner and the "login" box can be integrated into a php webpage

Hello GWP,

I haven't found the time to look into this further; could I see your page where you have the login? Have you found that it's easier for your members? One big problem that I have is that my members' PCs seem to "forget" their login, I'd like to have a "remember me" function.

When you say forget, do you mean forget their htaccess login?
I have that problem also, both with htaccess and mod_rewrite, but have found less of a problem since using mod_rewrite as the "remember me" box is clearer to see (i have made it more distinct).

They forget their login, yes. I put a button that says "lost password?", but the person has to know their username to successfully use that and usually they don't know that either.

It seems that all browsers sometimes delete the saved logins, it's happened to me, too.

Their e-mail address is used as the login & to get a forgotten password. This is normally much easier to remember then using the typical "username" field. Unless you have 10 e-mail addresses you normally use

Isn't that a "less secure" method - as someone who already knows the e-mail address would only have to guess at the password? Instead of needing both a username and password?

But I can see how it would be easier for the members.

In this scheme, does the username (e-mail address) show up in the website logs as it does with the htaccess method?