How can PHP developers securely authenticate users against an LDAP server in a web application?

To securely authenticate users against an LDAP server in a web application, PHP developers can use the LDAP extension in PHP to connect to the LDAP server, bind with a valid user credential, and search for the user's entry in the LDAP directory. Once the user is authenticated, access to the web application can be granted. 

<?php

$ldapserver = 'ldap.example.com';
$ldapport = 389;

$ldapconn = ldap_connect($ldapserver, $ldapport);

if ($ldapconn) {
    $ldapbind = ldap_bind($ldapconn, 'cn=user,dc=example,dc=com', 'password');

    if ($ldapbind) {
        // Search for the user in the LDAP directory
        $result = ldap_search($ldapconn, 'dc=example,dc=com', '(uid=username)');
        $entries = ldap_get_entries($ldapconn, $result);

        if ($entries['count'] > 0) {
            // User authenticated successfully
            // Grant access to the web application
        }
    }

    ldap_close($ldapconn);
}
?>

Keywords

PHP LDAP authentication security web application

Related Questions