PHP 使用过滤器将HTTP身份验证添加到应用程序

Posted 2021-05-14

<?php

class httpAuthFilter extends sfFilter
{
    
    public function execute($filterChain)
    {
        if($this->isFirstCall()) {
            if(!isset($_SERVER['PHP_AUTH_USER']) or
               ($_SERVER['PHP_AUTH_USER'] == sfConfig::get('app_auth_username') && $_SERVER['PHP_AUTH_PW'] == sfConfig::get('app_auth_password')) == false) {
                
                $this->sendHttpAuthHeaders();
            }
        }
        
        $filterChain->execute();
    }
    
    public function sendHttpAuthHeaders()
    {
        header('WWW-Authenticate: Basic realm="' . sfConfig::get('app_auth_realm') . '"');
        header('HTTP/1.0 401 Unauthorized');
        exit();
    }
    
}