passing htaccess passwords from flash to php

[buggedcom@work]

As to my previos post, i'm trying to make my scripts and stuff as secure as possible on the server, and therefore want to htaccess my folders, but in doinf so the user and pass box is opened when the swf calls the php files from a locked folder. is it possible to send the htaccess user and pass from flash to the browser so the window doesn't open?

I thought i read a tut once, a long time ago about passing the htaccess user and pass through php files, but not from flash. It's been a while since i last read it and have now subsequently lost the link

so is this possible?

[freddycodes]

You can but if someone happened to be port sniffing, or used a swf compiler to view the actionscript, there is a possibility of compromising the usernames and passwords.

Anyways here is how to do it.

reference your php script like this

http://username:passsword@www.somedomain.com/somepage.php

where username and password are the actual username and password.

[buggedcom]

cheers freddy. it does sound quite insecure then. would a better way to do it be to call a php file that contains function that in turn called the protected files and pass the user and password at the same time?

[focolo]

These posts are today almost 1.5 years old, but I have for quite some time been looking for the same solution as bugge did, without any success. Does anyone know how to:

"send the htaccess user and pass from flash to the browser so the window doesn't open?"

I intend to send the info to the htaccess-login via PHP if that simplify things!?