| Andras Malatinszky 2004-01-19, 6:32 am |
| How can I access/capture/log the password that a user enters under a
Basic Authentication scheme in Apache?
Here's the situation I'd like to resolve: as a webmaster of a
password-protected site with about 15k users, I get a number of
inquiries a day along the lines of "my password doesn't work." Almost
always, I look up the user's user name and password from a database
and then successfully authenticate. But then all I can say to the user
is "I don't know, you must have mistyped your password." I can grep
the error log for his user name and find something like
[Tue Jan 13 09:09:02 2004] [error] [client 24.73.18.13] user uwedyd:
authentication failure for "/broker/": password mismatch
so I know he entered his user name right, but I wish I could see what
he entered for a password so I could write back to him saying "Your
password is 'Boston' but you entered 'bOSTON' so release your caps
lock and try again."
Any suggestions?
Thanks,
Andras
|