Re: Getting username and password from the URL.

If you really need the password, there is a way you can get it, but not from the CGI script itself. You can use mod_auth_external to do your authentications, and use some sort of cache to store the username and password, then have your CGI script read that and compare to the REMOTE_USER environment variable. You're going to take a performance hit for doing this though.

If you use Apache's built-in authentication modules, you can be relatively certain the password was given correctly, so there's probably no need to check it a second time in your script.

It also seems like you should be able to implement something in mod_perl to obtain the password, but I haven't looked into it enough to know.

Comment on Re: Getting username and password from the URL.

Replies are listed 'Best First'.
RE: Re: Getting username and password from the URL. by Punto (Scribe) on Jun 11, 2000 at 23:17 UTC
If you really need the password, there is a way you can get it, but not from the CGI script itself. You can use mod_auth_external to do your authentications Actually, I only need apache to ask for the username and password, and then do the authentication on the CGI script. I don't need apache to check for the password..	[reply]