What is the purpose of using WWW-Authentification in PHP for an Admin area on a website?

Using WWW-Authentication in PHP for an Admin area on a website helps to restrict access to authorized users only, providing an additional layer of security. This authentication method prompts users to enter a username and password before accessing the Admin area, ensuring that sensitive information and functionalities are protected from unauthorized access. 

<?php
// Start the session
session_start();

// Check if the user is not authenticated
if (!isset($_SERVER['PHP_AUTH_USER'])) {
    header('WWW-Authenticate: Basic realm="Admin Area"');
    header('HTTP/1.0 401 Unauthorized');
    echo 'Authorization required.';
    exit;
} else {
    // Check the username and password
    $valid_username = 'admin';
    $valid_password = 'password';

    if ($_SERVER['PHP_AUTH_USER'] != $valid_username || $_SERVER['PHP_AUTH_PW'] != $valid_password) {
        header('HTTP/1.0 401 Unauthorized');
        echo 'Invalid username or password.';
        exit;
    }
}

// If the user is authenticated, display the Admin area content
echo 'Welcome to the Admin Area!';
?>

Keywords

WWW-Authentification PHP Admin area website security

Related Questions