Compile a php application to implement Digest Authentication. Similar to basic identity authentication, you can use PHP web pages to process HTTP request header fields to match Digest Authentication information. For example, the following code uses the header () function to
Basic identity authentication, you can also use the PHP Web page to process HTTP request header fields to match Digest authentication information. For example, the following code uses the header () function to require the client to use Digest authentication, which adds a www
This article provides a detailed analysis of how to compile a php application to implement Digest Authentication. For more information, see basic identity authentication, you can also use the PHP web page to process HTTP request header fields to match Digest Authentication i
This article provides a detailed analysis of how to compile a php application to implement Digest Authentication. For more information, see basic identity authentication, you can also use the PHP web page to process HTTP request header fields to match Digest Authentication i
Reprint Address: http://www.cnblogs.com/songwenlong/p/6517165.html
Table of Contents 0. Overview 1. Security of data transmission 2. Guaranteed Integrity 3. Guarantee the authenticity of the data 4. Public key Certificate 5. Algorithm detailed index
Body
This article explains symmetric encryption, asymmetric encryption, message digest, MAC, digital signature, the use of public key certificates, deficiencies, and problems solved.
Security System (i)
Similar to basic identity authentication, you can use PHP Web pages to process HTTP request header fields to match digest authentication information. For example, the following code uses the header () function to require the client to use Digest for verification. It adds the WWW-Authenticate field to the HTTP message h
Subject:
To write an Android application to access a data service system based on HTTP services, in order to improve security, the data Service system uses the HTTP Digest authentication system, the reason is that, compared with the Basic authentication method, Digest authenticati
authorization request header information to decrypt, and compares with the user database to judge whether the legality, the legal will return the OK, as to whether sends Authentication-info the head is optional
1PHP2 if(!isset($_server[' Php_auth_user '])) {3 Header(' Www-authenticate:basic realm= ' My Realm ');4 Header(' http/1.0 401 Unauthorized ');5 Echo' Text to send if user hits Cancel button ';6 Exit;7}Else {8 Echo"$_
Check HTTP for Digest authentication. Since http1.1The code looks like this: (This code is not perfect, the RFC2617 algorithm is not implemented).Code, as described above.Check HTTP for Digest authentication code example-jsp
http://blog.csdn.net/gl1987807/article/details/6090811
Read this article, some small questions to ask for a moment.
How do you generate the parameter values in the Digest authentication information in PHP?
Username = ' User name '
Realm = ' field '
nonce = ' Present '
URI = ' The URI the client wants to access '
QoQ = ' Client-selected protection method '
NC = "
Cnonce = ' '
Response = ' '
An equa
Basic identity authentication, you can also use PHP Web pages to handle HTTP request header fields to match Digest authentication information. For example, the following code uses the header () function to require the client to use Digest authentication, which adds a www-aut
easy to be intercepted by other people by the way of sniffing. The Digest authentication method carries on the MD5 operation to the user input password, transmits the operation result to the server, thus avoids the password to direct intercept the possibility.
Next, configure Digest authentication.
$ sudo a2enmod auth
Release date:Updated on:
Affected Systems:Apache Group Tomcat 7.xApache Group Tomcat 6.xApache Group Tomcat 5.xUnaffected system:Apache Group Tomcat 7.0.12Apache Group Tomcat 6.0.33Apache Group Tomcat 5.5.34Description:--------------------------------------------------------------------------------Bugtraq id: 49762Cve id: CVE-2011-1184
Tomcat is a Servlet container developed by the Jakarta project under the Apache Software Foundation. According to the technical specifications provided by Sun M
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.