身份验证

使用Apache的.htaccess特性：

如果只需对整个网站或特定的目录提供全局保护，.htaccess特性非常适合。

创建.htaccess的文件，把/path/to替换为另一个必要文件.htpasswd的路径

AuthUserFile /path/to/.htpasswd
AuthType Basic
AuthName "My Files"
Require valid-user

创建.htpasswd文件：

admin:TcmvAdAHiM7UY
client:f.i9PC3.ATcXE

用PHP验证用户

例：使用isset()验证一个变量是否包含值

1 if( !isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW'])) {
2         header('WWW-Authenticate: Basic Realm = "Book Projects"');
3         header('HTTP/1.1 401 Unanthorized');
4     } else {
5         echo "Your supplied username: {$_SERVER['PHP_AUTH_USER']}<br />";
6         echo "Your password: {$_SERVER['PHP_AUTH_PW']}<br />";
7     }

PHP验证方法

按照硬编码登录对身份进行验证

if(($_SERVER['PHP_AUTH_USER'] != 'wei') || ($_SERVER['PHP_AUTH_PW'] != 'xing')) {
        header('WWW-Authenticate: Basic Realm = "weixing"');
        header('HTTP/1.1 401 Unanthorized');
        print("You must provide the proper credentials!");
        exit;
    }

 根据平面文件登录库来验证用户

　　包含加密密码的authenticationFile.txt文件

jason:60d99e58d66a5e0f4f89ec3ddd1d9a80
donald:d5fc4b0e45c8f9a333c0056492c191cf
mickey:bc180dbc583491c00f8a1cd134f7517b

<?php
    $authorized = FALSE;

    if(isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW'])) {

        $authFile = file("authenticationFile.txt");

        if(in_array($_SERVER['PHP_AUTH_USER'].
                ":"
                .md5($_SERVER['PHP_AUTH_PW'])."
", $authFile))
            $authorized = TRUE;
    }

    if( !$authorized) {
        header('WWW-Authenticate: Basic Realm="Secret Stash"');
        header('HTTP/1.0 401 Unauthorized');
        print('You must provide the proper credentials');
        exit;
    }
?>

根据MySQL数据库验证用户

用户验证表

CREATE TABLE logins(
    id INTEGER UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
    username VARCHAR(255) NOT NULL,
    pswd VARCHAR(32) NOT NULL
);

INSERT INTO logins (username,pswd) VALUES('weixing','weixing');
INSERT INTO logins (username,pswd) VALUES('yuliang','yuliang');
INSERT INTO logins (username,pswd) VALUES('hujiang','hujiang');

<?php
    function authenticate_user(){
        header('WWW-Authenticate: Basic Realm="Secret Stash"');
        header('HTTP/1.0 401 Unauthorized');
        print('You must provide the proper credentials');
        exit;
    }

    if( !isset($_SERVER['PHP_AUTH_USER'])) {
        authenticate_user();
    }else{
        $db = new mysqli("127.0.0.1", "root", "", "test");

        $stmt = $db -> prepare("SELECT username, pswd from logins where username=? and pswd=?");

        $stmt -> bind_param('ss', $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']);

        $stmt -> execute();

        $stmt -> store_result();
        if( $stmt->num_rows == 0) {
            authenticate_user();
        }
    }
?>