Hi guys , I need some serious help , am
writing a script module with PHP , to add
user email with password after payment from paypal to the .htpasswd log.

When a user registers , his email and password gets added to the .htpasswd log ,So obv. , when he logins , he gets a prompt asking username and password ,the matter is I dont want the prompt to display , instead , I want to have a classic text box to send the email/pass data to the server.

Is there a way to send username(email) and password data to the server without prompt using .htaacess file/folder protection ?

Please help me guys...[/quote]

I think what you want to do is build a login system with php/mysql. You'd want to first store the email and password in the database and then present a form for the user to use when logging in. The form will need to check the database to see if the user is registered with the correct login info.

I did a search for php login scripts and it looks like there are plenty of tutorials.

I think there are a variety of ways for setting this up. Keep security in mind when you code. You want to check and sanitize anything the user inputs which will be both when you first input the data and also when they login.

I agree with Steven htacess login is generally very basic, and php/mysql user systems are much more usable and changeable and much easier to modify and use.

Originally Posted by dansgalaxy

I agree with Steven htacess login is generally very basic, and php/mysql user systems are much more usable and changeable and much easier to modify and use.

I agree with the "usable, changeable, much easier to modify and use" but I think the .htaccess might be much more secure.

If you go the php route be sure to study the sql injection aspect VERY carefully.

BTDT,

Fair enough but often htaccess isnt secured properly (ie htpasswd is in a public foder) and if you write your scripts securly and have passwords encrypted in the database etc i would say and minor drop in security is negliable