Friday, 13 May 2016

Re: how to make Netsurf forget its logged-in state

In article <cc56a57f55.jim@abbeypress.net>,
Jim Nagel <netsurf@abbeypress.co.uk> wrote:
> [Please reply to the list rather than to me privately.]

> Ashish Gupta wrote on 13 May:
> > Thanks for explaining the login process. It looks like you make use of
> > Basic Auth for the login.

> The PHP includes statements like this:
> if (!isset($_SERVER["PHP_AUTH_USER"])

> Does that confirm what you say about "Basic Auth"? Is that something
> that resides on the server as a resource for customers like me?

That variable does indeed have to do with HTTP authentication. That type
of authentication does not use cookies, but is handled by the browser
internally. It remembers the login details after you've successfully
logged in to a site, but in my experience browsers tend to forget that
after being closed down. If NetSurf retains the information, I *think*
that should be classified as a bug, but I'm not certain. I've just never
seen it happen with the browsers I use regularly.

I'll run some tests with the login details you sent me recently to see
if I can figure out where NetSurf stores this info.

> Then downloaded the log file which the PHP generates on the server and
> checked it. These login tests do NOT appear on the log.

That's because they're not done by the PHP script, which is server side.
The browser does it all by itself.

Regards,
Frank

No comments:

Post a Comment