Browser Basic Auth authentication phpMyAdmin automatic login

Home

Backend Development

PHP Tutorial

Browser Basic Auth authentication phpMyAdmin automatic login_PHP tutorial

WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWB

Jul 13, 2016 pm 05:08 PM

auth basic phpmyadmin introduce article Way Browser Log in of automatic Certification

This article will introduce to you the automatic login of phpMyAdmin using browser Basic Auth authentication. Students who need to know more can refer to it.

1. Demand
Automatically log in to phpMyAdmin. Finally, we can solve the problem of automatically logging in to all web pages that use Basic Auth authentication.

.
2. Four authentication login methods for phpMyAdmin
1.config configuration file. Directly write the username and password allowed to log in in the config.inc.php configuration file.
2. Cookies. The most common way is to log in by filling out the form on the home page.
3.http. HTTP Basic Authentication method, using the browser's pop-up dialog box to log in. The difference from the cookie method mainly lies in the user experience.
4.signon. Single sign-on, suitable for system integration. After the user logs in to a system, he can log in to phpMyAdmin with one click without having to enter his username and password.
Reference: http://wiki.phpmyadmin.net/pma/Auth_types

Logically speaking, the signon method should be the preferred solution to meet the needs. However, project development always involves compromises and accommodations, and it is necessary to interfere with the operation of the existing system as little as possible. In addition, while implementing the signon method to log in, it is also necessary to retain the original login method of users entering their username and password, that is, a backup login solution. This complicates the matter.

3. What is Basic Auth
The existing system uses Basic Auth, so I studied how to log in with one click in this case.

When accessing a URL that requires HTTP Basic Authentication, if you do not provide a username and password, the server will return 401, and the browser will prompt you to enter a username and password. Examples are as follows:

The code is as follows	Copy code

代码如下	复制代码
if (!isset($_SERVER['PHP_AUTH_USER'])) { header('WWW-Authenticate: Basic realm="My Realm"'); header('HTTP/1.1 401 Unauthorized'); } else { echo " Hello {$_SERVER['PHP_AUTH_USER']}. "; echo " You entered {$_SERVER['PHP_AUTH_PW']} as your password. "; } ?>

if (!isset($_SERVER['PHP_AUTH_USER'])) { header('WWW-Authenticate: Basic realm="My Realm"'); Header('HTTP/1.1 401 Unauthorized'); } else { echo "

Hello {$_SERVER['PHP_AUTH_USER']}.

"; echo "

You entered {$_SERVER['PHP_AUTH_PW']} as your password.

"; } ?>

Save it as login.php and browse http://localhost/login.php to check the effect.

Browser Basic Auth: Pop-up authentication dialog box for IE9 and Chrome
Enter the username and password in the window that pops up in the browser. If you use Chrome Developer Tools (or Firebug) to view it, you will find that it actually just sends an additional request header similar to the following:

Authorization: Basic bXlfdXNlcm5hbWU6bXlfcGFzc3dvcmQ=
4. Basic Auth authentication automatic login solution
To pass the certification, there are basically 2 methods

•First, add Authorization in the request header (can be implemented with Javascript):
Authorization: “Basic base64 encrypted string of username and password”
•The second is to add the username and password in the url (not supported by IE):
http://username:password@domain.com/login.php

To add request headers using js, you can use XMLHttpRequest. The implementation code is as follows:

The code is as follows

代码如下

复制代码

login
<script><br> function login() {<br> var username = document.getElementById("username").value;<br> var password = document.getElementById("password").value;<br> <br> xhr = new XMLHttpRequest();<br> xhr.open("POST", "http://localhost/login.php", false, username, password);<br> xhr.send(null);<br> <br> return xhr.status == 200;<br> }<br> </script>

Copy code

Basic Auth authentication automatic login solution, in summary—— 1. The username and password are written directly in the URL. Disadvantages: Not secure enough and not supported by IE. 2. Write a login form. PHP fills in the username and password into the form, and then when the page is loaded, js generates the Authorization request header and submits it Disadvantage: This system and phpMyAdmin must be in the same domain. For example, this system is in admin.domain.com, and phpMyAdmin is in phpmyadmin.domain.com. In this case, js cannot be submitted across domains. 3. This system posts the username and password to a form in the domain where phpMyAdmin is located, and then uses that form to log in using js. Disadvantage: You need to add a new page to the domain where phpMyAdmin is located to achieve cross-domain. http://www.bkjia.com/PHPjc/629832.htmlwww.bkjia.comtruehttp: //www.bkjia.com/PHPjc/629832.htmlTechArticleThis article will introduce to you the automatic login of phpMyAdmin with browser Basic Auth authentication. Students who need to know more can enter refer to. 1. Requirements Automatically log in to phpMyAdmin. Finally able to solve...

Statement of this Website

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress images for free

Clothoff.io

AI clothes remover

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

What's New in Windows 11 KB5054979 & How to Fix Update Issues

3 weeks ago By DDD

How to fix KB5055523 fails to install in Windows 11?

3 weeks ago By DDD

InZoi: How To Apply To School And University

4 weeks ago By DDD

How to fix KB5055518 fails to install in Windows 10?

3 weeks ago By DDD

Where to find the Site Office Key in Atomfall

4 weeks ago By DDD

Hot Tools

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

God-level code editing software (SublimeText3)

Hot Topics

Where is the login entrance for gmail email?

7873

Java Tutorial

1649

CakePHP Tutorial

1408

Laravel Tutorial

1301

PHP Tutorial

1245

Related knowledge

How to adjust the wordpress article list Apr 20, 2025 am 10:48 AM

There are four ways to adjust the WordPress article list: use theme options, use plugins (such as Post Types Order, WP Post List, Boxy Stuff), use code (add settings in the functions.php file), or modify the WordPress database directly.

How to cancel the editing date of wordpress Apr 20, 2025 am 10:54 AM

WordPress editing dates can be canceled in three ways: 1. Install the Enable Post Date Disable plug-in; 2. Add code in the functions.php file; 3. Manually edit the post_modified column in the wp_posts table.

Why can't JavaScript directly obtain hardware information on the user's computer? Apr 19, 2025 pm 08:15 PM

Discussion on the reasons why JavaScript cannot obtain user computer hardware information In daily programming, many developers will be curious about why JavaScript cannot be directly obtained...

Can JWT implement dynamic permission changes? What is the difference from the Session mechanism? Apr 19, 2025 pm 06:12 PM

Confusion and answers about JWT and Session Many beginners are often confused about their nature and applicable scenarios when learning JWT and Session. This article will revolve around J...

What to do if the USDT transfer address is incorrect? Guide for beginners Apr 21, 2025 pm 12:12 PM

After the USDT transfer address is incorrect, first confirm that the transfer has occurred, and then take measures according to the error type. 1. Confirm the transfer: view the transaction history, obtain and query the transaction hash value on the blockchain browser. 2. Take measures: If the address does not exist, wait for the funds to be returned or contact customer service; if it is an invalid address, contact customer service and seek professional help; if it is transferred to someone else, try to contact the payee or seek legal help.

How to register an account on Ouyi Exchange Ouyi Exchange Registration Tutorial Apr 24, 2025 pm 02:06 PM

The steps to register an Ouyi account are as follows: 1. Prepare a valid email or mobile phone number and stabilize the network. 2. Visit Ouyi’s official website. 3. Enter the registration page. 4. Select email or mobile phone number to register and fill in the information. 5. Obtain and fill in the verification code. 6. Agree to the user agreement. 7. Complete registration and log in, carry out KYC and set up security measures.

Can two exchanges convert coins to each other? Can two exchanges convert coins to each other? Apr 22, 2025 am 08:57 AM

Can. The two exchanges can transfer coins to each other as long as they support the same currency and network. The steps include: 1. Obtain the collection address, 2. Initiate a withdrawal request, 3. Wait for confirmation. Notes: 1. Select the correct transfer network, 2. Check the address carefully, 3. Understand the handling fee, 4. Pay attention to the account time, 5. Confirm that the exchange supports this currency, 6. Pay attention to the minimum withdrawal amount.

What is on-chain transaction? What are the global transactions? Apr 22, 2025 am 10:06 AM

EU MiCA compliance certification, covering 50 fiat currency channels, cold storage ratio 95%, and zero security incident records. The US SEC licensed platform has convenient direct purchase of fiat currency, a ratio of 98% cold storage, institutional-level liquidity, supports large-scale OTC and custom orders, and multi-level clearing protection.

See all articles