HTTP Auth without entering data into the browsers login-box via PHP header()

Yves Vogl <[email protected]> Mon, 31 Oct 2005 23:20:58 +0100
Newsgroups gmane.comp.mozilla.devel.mac
Message-ID <[email protected]> 
--Apple-Mail-1-18719231
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=WINDOWS-1252;
	delsp=yes;
	format=flowed

Hi,

a few time ago there was a easy method to pass a username and a =20
matching password to a http-auth secured realm (also incorrectly =20
known as ".htaccess secured websites").

Just by typing http://username:[email protected]

Works even fine with Mozilla today.

But that's a serious security-issue due to the fact that the complete =20=

URL string is beeing logged by e.g. apache webserver and in worst-=20
case parsed by webalizer and so published on maybe public available =20
sites.
Also Microsoft removed this "feature" from IE6 due to another =20
security issues.

HTTP 1.0 RFC entries say that there is the possibility to generate an =20=

"Authorization" header which contains the base64 encoded combination =20
of username and passwort - both separated by an ":" .

So I gave it a try with PHP=85


Code:


$query=3Dmysql_query("select realm from ".DB_TAB." where =20
username=3D'".mysql_escape_string($_POST['username'])."' order by =20
username asc",$handler);
if(mysql_num_rows($query)>0) {

     $result=3Dmysql_fetch_array($query);


     switch($result['realm']) {
         case MEMBER_DE:
             $location=3D'http://www.domain.com/member/';
         break;
         case MEMBER_EN:
             $location=3D'http://www.domain.com/en/member/';
         break;
         case PRESS_DE:
             $location=3D'http://www.domain.com/press/';
         break;
         case PRESS_EN:
             $location=3D'http://www.domain.com/en/press/';
         break;
     }

     header('Location: '.$location);
} else {
     header("Location: [URL]http://www.domain.com/04_login.php?error=3D=20=

[/URL]".mysql_escape_string($_POST['username'])."");
}




The script above uses a username and a password which is send from a =20
http-form by using the HTTP-POST method.
After choosing 1 of 4 possible realms the browser is redirected to =20
the specific realm=85 here the user must re-enter his authentication =20
data again=85
Concatenating the redirection url with =20
username:[email protected] works fine in mozilla=85 =96 but =20
useless because of the facts mentioned above.

So I tried to let the browser know that it has been authenticated =20
successfully by sending the authorization header so that this would =20
be repeated for each request - in my opinion.

Here I'm stuck with it.
Normally the browser has to authenticate itself to the server=85 how =20
does the browser do it? When I enter my username and password in the =20
browser's own loginbox, how is these data send to the server?
What does the browser exactly do when I visit a site which login-data =20=

is saved in the password-manager (autocomplete)?

I looked up the PHP header() documentation on PHP.net and followed =20
the link about HTTP-Auth=85 but there are only ways to "delete an =20
active session" mentioned.


I tried this but it doesn't work:

Code:

//=85

     $authorization=3Dbase64_encode($_POST['username'].':'.$_POST=20
['password']);

//=85
     $location=3D'http://www.domain.com/member/';

     header('Location: '.$location);
     header('WWW-Authenticate: Basic realm=3D"Password Protected =
Area"');
     header('Authorization: Basic '.$authorization);
//=85




What I exactly want to do is to enter a username and a passwort =20
within a simple html-form and then pass these data to the server =20
while redirecting to a password-protected site without getting =20
prompted to enter my username passwort again.



Follow Ups:
http://forums.mozillazine.org/viewtopic.php?p=3D1845277#1845277
http://forum.hetzner.de/wbb2/thread.php?sid=3D&postid=3D50961=

--Apple-Mail-1-18719231
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=WINDOWS-1252

<HTML><BODY style=3D"word-wrap: break-word; -khtml-nbsp-mode: space; =
-khtml-line-break: after-white-space; "><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">Hi,</SPAN></FONT><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">a few time ago there was =
a easy method to pass a username and a matching password to a http-auth =
secured realm (also incorrectly known as ".htaccess secured =
websites").</SPAN></FONT><FONT class=3D"Apple-style-span" size=3D"3"><SPAN=
 class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px;">Just by typing </SPAN></FONT><A =
href=3D"http://username:[email protected]/"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px;"><FONT class=3D"Apple-style-span" =
color=3D"#1C6263">http://username:[email protected]</FONT></SPAN></FONT>=
</A><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: =
12px;">=A0</SPAN></FONT></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">Works even fine with =
Mozilla today.</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Verdana; =
min-height: 15px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">But that's a serious =
security-issue due to the fact that the complete URL string is beeing =
logged by e.g. apache webserver and in worst-case parsed by webalizer =
and so published on maybe public available sites.</SPAN></FONT><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">Also Microsoft removed =
this "feature" from IE6 due to another security =
issues.</SPAN></FONT><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">HTTP 1.0 RFC entries say =
that there is the possibility to generate an "Authorization" header =
which contains the base64 encoded combination of username and passwort - =
both separated by an ":" .</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Verdana; =
min-height: 15px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">So I gave it a try with =
PHP=85</SPAN></FONT><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Verdana; min-height: 15px; "><SPAN class=3D"Apple-style-span" =
style=3D"line-height: 18px;"><BR></SPAN></DIV><TABLE width=3D"506.0" =
cellspacing=3D"0" cellpadding=3D"0" style=3D"width: 506.0px; padding: =
3.0px 0.0px 3.0px 0.0px"><TBODY><TR><TD valign=3D"middle" style=3D"width: =
498.0px; margin: 0.5px 0.5px 0.5px 0.5px; padding: 0.0px 3.0px 0.0px =
3.0px"><DIV style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; "><FONT class=3D"Apple-style-span" size=3D"3"><SPAN=
 class=3D"Apple-style-span" style=3D"font-size: =
11px;"><B>Code:</B></SPAN></FONT></DIV></TD></TR><TR><TD valign=3D"middle"=
 style=3D"width: 496.0px; background-color: #fafafa; margin: 0.5px 0.5px =
0.5px 0.5px; border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px; =
border-color: #d1d7db #d1d7db #d1d7db #d1d7db; padding: 0.0px 3.0px =
0.0px 3.0px"><DIV style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
11px/normal Courier; min-height: 13px; "><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E"><SPAN class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 11px/normal Courier; min-height: 13px; "><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E"><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">$query=3Dmysql_query("select realm from ".DB_TAB." =
where username=3D'".mysql_escape_string($_POST['username'])."' order by =
username asc",$handler);</SPAN></FONT><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E" face=3D"Courier" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">if(mysql_num_rows($query)&gt;0) =
{</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 11px/normal Courier; min-height: 13px; "><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E"><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =
$result=3Dmysql_fetch_array($query);</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 11px/normal Courier; =
min-height: 13px; "><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E"><SPAN class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV><P style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></P><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =
switch($result['realm']) {</SPAN></FONT><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E" face=3D"Courier" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 case MEMBER_DE:</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =A0 =A0 =A0 =A0 =
$location=3D'<A =
href=3D"http://www.domain.com/member/'">http://www.domain.com/member/'</A>=
;</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 break;</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =A0 =A0 case =
MEMBER_EN:</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E"=
 face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 =A0 =A0 $location=3D'<A =
href=3D"http://www.domain.com/en/member/'">http://www.domain.com/en/member=
/'</A>;</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 break;</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =A0 =A0 case =
PRESS_DE:</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 =A0 =A0 $location=3D'<A =
href=3D"http://www.domain.com/press/'">http://www.domain.com/press/'</A>;<=
/SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 break;</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =A0 =A0 case =
PRESS_EN:</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 =A0 =A0 $location=3D'<A =
href=3D"http://www.domain.com/en/press/'">http://www.domain.com/en/press/'=
</A>;</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0 =A0 break;</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =
}</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><P style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></P><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =
header('Location: '.$location);</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">} else =
{</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 header("Location: [URL]<A =
href=3D"http://www.domain.com/04_login.php?error=3D[/URL]">http://www.doma=
in.com/04_login.php?error=3D[/URL]</A>".mysql_escape_string($_POST['userna=
me'])."");</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E"=
 face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">}</SPAN></FONT><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E" face=3D"Courier" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 11px/normal Courier; min-height: 13px; "><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E"><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV></TD></TR></TBODY></TABLE><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Verdana; =
min-height: 15px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Verdana; min-height: 15px; "><SPAN class=3D"Apple-style-span" =
style=3D"line-height: 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">The script above uses a =
username and a password which is send from a http-form by using the =
HTTP-POST method.</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">After choosing 1 of 4 possible realms the browser is redirected =
to the specific realm=85 here the user must re-enter his authentication =
data again=85</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">Concatenating the redirection url with username:<A =
href=3D"mailto:[email protected]">[email protected]</A> =
works fine in mozilla=85 =96 but useless because of the facts mentioned =
above.</SPAN></FONT><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">So I tried to let the =
browser know that it has been authenticated successfully by sending the =
authorization header so that this would be repeated for each request - =
in my opinion.</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Verdana; =
min-height: 15px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">Here I'm stuck with =
it.</SPAN></FONT><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">Normally the browser has =
to authenticate itself to the server=85 how does the browser do it? When =
I enter my username and password in the browser's own loginbox, how is =
these data send to the server?</SPAN></FONT><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">What does the browser =
exactly do when I visit a site which login-data is saved in the =
password-manager (autocomplete)?</SPAN></FONT><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">I looked up the PHP =
header() documentation on PHP.net and followed the link about HTTP-Auth=85=
 but there are only ways to "delete an active session" =
mentioned.</SPAN></FONT><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 12px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Verdana; min-height: 15px; "><SPAN class=3D"Apple-style-span" =
style=3D"line-height: 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">I tried this but it =
doesn't work:</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Verdana; =
min-height: 15px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><BR></SPAN></DIV><TABLE width=3D"514.0" cellspacing=3D"0" =
cellpadding=3D"0" style=3D"width: 514.0px; padding: 3.0px 0.0px 3.0px =
0.0px"><TBODY><TR><TD valign=3D"middle" style=3D"width: 506.0px; margin: =
0.5px 0.5px 0.5px 0.5px; padding: 0.0px 3.0px 0.0px 3.0px"><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><FONT class=3D"Apple-style-span" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: =
11px;"><B>Code:</B></SPAN></FONT></DIV></TD></TR><TR><TD valign=3D"middle"=
 style=3D"width: 504.0px; background-color: #fafafa; margin: 0.5px 0.5px =
0.5px 0.5px; border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px; =
border-color: #d1d7db #d1d7db #d1d7db #d1d7db; padding: 0.0px 3.0px =
0.0px 3.0px"><DIV style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
11px/normal Courier; min-height: 13px; "><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E"><SPAN class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">//=85</SPAN></FONT><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E" face=3D"Courier" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><P style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></P><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =
$authorization=3Dbase64_encode($_POST['username'].':'.$_POST['password']);=
</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><P style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 =A0</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></P><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">//=85</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 $location=3D'<A =
href=3D"http://www.domain.com/member/'">http://www.domain.com/member/'</A>=
;</SPAN></FONT><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 11px/normal Courier; min-height: 13px; "><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E"><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 header('Location: =
'.$location);</SPAN></FONT><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E" face=3D"Courier" size=3D"3"><SPAN =
class=3D"Apple-style-span" style=3D"font-size: 11px; line-height: =
normal;">=A0</SPAN></FONT></SPAN></DIV><DIV style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0 =A0 header('WWW-Authenticate: Basic =
realm=3D"Password Protected Area"');</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">=A0 =A0 =
header('Authorization: Basic '.$authorization);</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><FONT class=3D"Apple-style-span" color=3D"#1F5F1E" =
face=3D"Courier" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 11px; line-height: normal;">//=85</SPAN></FONT><FONT =
class=3D"Apple-style-span" color=3D"#1F5F1E" face=3D"Courier" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 11px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 11px/normal Courier; =
min-height: 13px; "><FONT class=3D"Apple-style-span" =
color=3D"#1F5F1E"><SPAN class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></FONT></DIV></TD></TR></TBODY></TABLE><DIV =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Verdana; =
min-height: 15px; "><SPAN class=3D"Apple-style-span" style=3D"line-height:=
 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Verdana; min-height: 15px; "><SPAN class=3D"Apple-style-span" =
style=3D"line-height: 18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 12px/normal Verdana; min-height: 15px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: =
18px;"><BR></SPAN></DIV><DIV style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; "><SPAN =
class=3D"Apple-style-span" style=3D"line-height: 18px;"><FONT =
class=3D"Apple-style-span" size=3D"3"><SPAN class=3D"Apple-style-span" =
style=3D"font-size: 12px; line-height: normal;">What I exactly want to =
do is to enter a username and a passwort within a simple html-form and =
then pass these data to the server while redirecting to a =
password-protected site without getting prompted to enter my username =
passwort again.</SPAN></FONT><FONT class=3D"Apple-style-span" =
size=3D"3"><SPAN class=3D"Apple-style-span" style=3D"font-size: 12px; =
line-height: normal;">=A0</SPAN></FONT></SPAN></DIV><DIV><BR =
class=3D"khtml-block-placeholder"></DIV><DIV><BR =
class=3D"khtml-block-placeholder"></DIV><DIV><BR =
class=3D"khtml-block-placeholder"></DIV>Follow Ups:<BR><A =
href=3D"http://forums.mozillazine.org/viewtopic.php?p=3D1845277#1845277">h=
ttp://forums.mozillazine.org/viewtopic.php?p=3D1845277#1845277</A><DIV>htt=
p://forum.hetzner.de/wbb2/thread.php?sid=3D&amp;postid=3D50961</DIV></BODY=
></HTML>=

--Apple-Mail-1-18719231--