aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth/auth_apache.php
blob: 88d5be4f4f59e447c249c9e70f8ed65290d2ece0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
<?php

//
// Authentication plug-ins is largely down to
// Sergey Kanareykin, our thanks to him.
//
function login_apache(&$username, &$password)
{
	global $HTTP_SERVER_VARS, $HTTP_ENV_VARS;

	$php_auth_user = ( !empty($HTTP_SERVER_VARS['PHP_AUTH_USER']) ) ? $HTTP_SERVER_VARS['PHP_AUTH_USER'] : $HTTP_GET_VARS['PHP_AUTH_USER'];
	$php_auth_pw = ( !empty($HTTP_SERVER_VARS['PHP_AUTH_PW']) ) ? $HTTP_SERVER_VARS['PHP_AUTH_PW'] : $HTTP_GET_VARS['PHP_AUTH_PW'];

	if ( $php_auth_user && $php_auth_pw )
	{
		$sql = "SELECT user_id, username, user_password, user_email, user_active
			FROM " . USERS_TABLE . "
			WHERE username = '" . str_replace("\'", "''", $username) . "'";
		$result = $db->sql_query($sql);

		return ( $row = $db->sql_fetchrow($result) ) ? $row : false;
	}

	return false;
}

?>