PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

Using mod_auth_mysql Authentication
407
6. Add a line to your httpd.conf file to give mod_auth_mysql the parameters it
needs to connect to MySQL.The directive will look like
Auth_MySQL_Info hostname user password
The easiest way to check whether your compilation worked is to see whether Apache
will start.To start Apache type
/usr/local/apache/bin/apachectl startssl
If it starts with the Auth_MySQL_Info directive in the httpd.conf file,
mod_auth_mysql was successfully added.
Using mod_auth_mysql
After you have successfully installed the mod_auth_mysql module, using it is no harder
than using mod_auth. Listing 17.9 shows a sample .htaccess file that will authenticate
users with encrypted passwords stored in the database created earlier in this chapter.
Listing 17.9 .htaccess— This .htaccess File Authenticates Users Against a
MySQL Database
ErrorDocument 401 /chapter17/rejection.html
AuthName “Realm Name”
AuthType Basic
Auth_MySQL_DB auth
Auth_MySQL_Encryption_Types MySQL
Auth_MySQL_Password_Table authorized_users
Auth_MySQL_Username_Field name
Auth_MySQL_Password_Field password
require valid-user
You can see that much of Listing 17.9 is the same as Listing 17.7.You still specify an
error document to display in the case of error 401 (when authentication fails).You again
specify basic authentication and give a realm name. As in Listing 17.7, you allow any
valid, authenticated user access.
Because we are using mod_auth_mysql and did not want to use all the default settings,
we used some directives to specify how this should work. Auth_MySQL_DB,
Auth_MySQL_Password_Table, Auth_MySQL_Username_Field, and
Auth_MySQL_Password_Field specify the name of the database, the table, the username
field, and the password field, respectively.