Created
March 6, 2017 06:05
-
-
Save ioanlongjing/4a693515430723bc88c332524c9a5b0f to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php | |
| $realm = 'Restricted area'; | |
| //user => password | |
| $users = array('admin' => 'mypass', 'guest' => 'guest'); | |
| if (empty($_SERVER['PHP_AUTH_DIGEST'])) { | |
| header('HTTP/1.1 401 Unauthorized'); | |
| header('WWW-Authenticate: Digest realm="'.$realm. | |
| '",qop="auth",nonce="'.uniqid().'",opaque="'.md5($realm).'"'); | |
| die('Text to send if user hits Cancel button'); | |
| } | |
| // analyze the PHP_AUTH_DIGEST variable | |
| if (!($data = http_digest_parse($_SERVER['PHP_AUTH_DIGEST'])) || | |
| !isset($users[$data['username']])) | |
| die('Wrong Credentials!'); | |
| // generate the valid response | |
| $A1 = md5($data['username'] . ':' . $realm . ':' . $users[$data['username']]); | |
| $A2 = md5($_SERVER['REQUEST_METHOD'].':'.$data['uri']); | |
| $valid_response = md5($A1.':'.$data['nonce'].':'.$data['nc'].':'.$data['cnonce'].':'.$data['qop'].':'.$A2); | |
| if ($data['response'] != $valid_response) | |
| die('Wrong Credentials!'); | |
| // ok, valid username & password | |
| echo 'You are logged in as: ' . $data['username']; | |
| // function to parse the http auth header | |
| function http_digest_parse($txt) | |
| { | |
| // protect against missing data | |
| $needed_parts = array('nonce'=>1, 'nc'=>1, 'cnonce'=>1, 'qop'=>1, 'username'=>1, 'uri'=>1, 'response'=>1); | |
| $data = array(); | |
| $keys = implode('|', array_keys($needed_parts)); | |
| preg_match_all('@(' . $keys . ')=(?:([\'"])([^\2]+?)\2|([^\s,]+))@', $txt, $matches, PREG_SET_ORDER); | |
| foreach ($matches as $m) { | |
| $data[$m[1]] = $m[3] ? $m[3] : $m[4]; | |
| unset($needed_parts[$m[1]]); | |
| } | |
| return $needed_parts ? false : $data; | |
| } | |
| ?> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment