What is the purpose of HTTP authentication in PHP and how is it implemented?

HTTP authentication in PHP is used to restrict access to certain web pages or resources by requiring users to enter a username and password. This helps to ensure that only authorized users can access sensitive information or perform certain actions on a website. HTTP authentication can be implemented using various methods such as Basic, Digest, or Bearer authentication. 

<?php
// HTTP authentication using Basic method
$username = 'admin';
$password = 'password';

if (!isset($_SERVER['PHP_AUTH_USER']) || $_SERVER['PHP_AUTH_USER'] != $username || $_SERVER['PHP_AUTH_PW'] != $password) {
    header('WWW-Authenticate: Basic realm="Restricted Area"');
    header('HTTP/1.0 401 Unauthorized');
    echo 'Access denied';
    exit;
}

// If the user is authenticated, display the protected content
echo 'Welcome, ' . $_SERVER['PHP_AUTH_USER'];
?>

Keywords

HTTP authentication PHP implementation authentication methods security

Related Questions