I think that you are after this

    $username = $_SERVER[&#39;PHP_AUTH_USER&#39;];
    $password = $_SERVER[&#39;PHP_AUTH_PW&#39;];

I get the following error pretty regularly when compiling in Visual Studio and running my web application:

&quot;Unable to start debugging on the web server. The web server did not respond in a timely manner.  This may be because another debugger is already attached to the web server.&quot;

Normally this is after having debug the application once already. From the command line I run &quot;iisreset /restart&quot; and it fixes the problem.

How do I prevent this from happening in the first place?

Visual Studio &quot;Unable to start debugging on the web server. The web server did not respond in a timely manner.&quot;

I&#39;ve written a database generation script in [SQL][1] and want to execute it in my [Adobe AIR][2] application:

    Create Table tRole (
        roleID integer Primary Key
        ,roleName varchar(40)
    );
    Create Table tFile (
        fileID integer Primary Key
        ,fileName varchar(50)
        ,fileDescription varchar(500)
        ,thumbnailID integer
        ,fileFormatID integer
        ,categoryID integer
        ,isFavorite boolean
        ,dateAdded date
        ,globalAccessCount integer
        ,lastAccessTime date
        ,downloadComplete boolean
        ,isNew boolean
        ,isSpotlight boolean
        ,duration varchar(30)
    );
    Create Table tCategory (
        categoryID integer Primary Key
        ,categoryName varchar(50)
        ,parent_categoryID integer
    );
    ...

I execute this in Adobe AIR using the following methods:

    public static function RunSqlFromFile(fileName:String):void {
        var file:File = File.applicationDirectory.resolvePath(fileName);
        var stream:FileStream = new FileStream();
        stream.open(file, FileMode.READ)
        var strSql:String = stream.readUTFBytes(stream.bytesAvailable);
        NonQuery(strSql);
    }

    public static function NonQuery(strSQL:String):void {
        var sqlConnection:SQLConnection = new SQLConnection();
        sqlConnection.open(File.applicationStorageDirectory.resolvePath(DBPATH));
        var sqlStatement:SQLStatement = new SQLStatement();
        sqlStatement.text = strSQL;
        sqlStatement.sqlConnection = sqlConnection;
        try {
            sqlStatement.execute();
        } catch (error:SQLError) {
            Alert.show(error.toString());
        }
    }

No errors are generated, however only `tRole` exists. It seems that it only looks at the first query (up to the semicolon- if I remove it, the query fails). Is there a way to call multiple queries in one statement?

  [1]: http://en.wikipedia.org/wiki/SQL
  [2]: http://en.wikipedia.org/wiki/Adobe_Integrated_Runtime


SQLStatement.execute() - multiple queries in one statement

First, let&#39;s get the security considerations out of the way. I&#39;m using simple authentication under Apache for a one-off, internal use only, non-internet connected LAN, PHP web app.

How can get I the HTTP authenticated user name in PHP?

How can I get the authenticated user name under Apache using plain HTTP authentication and PHP?

<p>First, let's get the security considerations out of the way. I'm using simple authentication under Apache for a one-off, internal use only, non-internet connected LAN, PHP web app.</p>
<p>How can get I the HTTP authenticated user name in PHP?</p>


What are the best methods for tracking and/or automating DB schema changes?  Our team uses Subversion for version control and we&#39;ve been able to automate some of our tasks this way (pushing builds up to a staging server, deploying tested code to a production server) but we&#39;re still doing database updates manually.  I would like to find or create a solution that allows us to work efficiently across servers with different environments while continuing to use Subversion as a backend through which code and DB updates are pushed around to various servers.

Many popular software packages include auto-update scripts which detect DB version and apply the necessary changes.  Is this the best way to do this even on a larger scale (across multiple projects and sometimes multiple environments and languages)?  If so, is there any existing code out there that simplifies the process or is it best just to roll our own solution?  Has anyone implemented something similar before and integrated it into Subversion post-commit hooks, or is this a bad idea?

While a solution that supports multiple platforms would be preferable, we definitely need to support the Linux/Apache/MySQL/PHP stack as the majority of our work is on that platform.

Mechanisms for tracking DB schema changes

I am trying to grab the capital letters of a couple of words and wrap them in span tags. I am using [preg_replace][1] for extract and wrapping purposes, but it&#39;s not outputting anything.

    preg_replace(&quot;/[A-Z]/&quot;, &quot;&lt;span class=\&quot;initial\&quot;&gt;$1&lt;/span&gt;&quot;, $str)

   [1]: http://php.net/manual/en/function.preg-replace.php

How can I get at the matches when using preg_replace in PHP?

I have a directory structure like the following;
&gt;script.php
&gt;
&gt;inc/include1.php&lt;br/&gt;
&gt;inc/include2.php
&gt;
&gt;objects/object1.php&lt;br/&gt;
&gt;objects/object2.php
&gt;
&gt;soap/soap.php

Now, I use those objects in both `script.php` and `/soap/soap.php`, I could move them, but I want the directory structure like that for a specific reason. When executing `script.php` the include path is `inc/include.php` and when executing `/soap/soap.php` it&#39;s `../inc`, absolute paths work, `/mnt/webdev/[project name]/inc/include1.php...` But it&#39;s an ugly solution if I ever want to move the directory to a different location.

So is there a way to use relative paths, or a way to programmatically generate the `&quot;/mnt/webdev/[project name]/&quot;`?

How to include PHP files that require an absolute path?

Is there available any tool for PHP which can be used to generate code for consuming a [web service][2] based on its [WSDL][1]? Something comparable to clicking &quot;Add Web Reference&quot; in Visual Studio or the Eclipse plugin which does the same thing for Java.

  [1]: http://en.wikipedia.org/wiki/Web_Services_Description_Language
  [2]: http://en.wikipedia.org/wiki/Web_service

How to easily consume a web service from PHP

Does anyone know of a good method for editing PDFs in PHP? Preferably open-source/zero-license cost methods. :)

I am thinking along the lines of opening a PDF file, replacing text in the PDF and then writing out the modified version of the PDF?

On the front-end

Edit PDF en PHP?

How do you redirect HTTPS to HTTP?. That is, the opposite of what (seemingly) everyone teaches.

I have a server on HTTPS for which I paid an SSL certification for and a mirror for which I haven&#39;t and keep around for just for emergencies so it doesn&#39;t merit getting a certification for.

On my client&#39;s desktops I have SOME shortcuts which point to `http://production_server` and `https://production_server` (both work). However, I know that if my production server goes down, then DNS forwarding kicks in and those clients which have &quot;https&quot; on their shortcut will be staring at `https://mirror_server` (which doesn&#39;t work) and a big fat Internet Explorer 7 red screen of uneasyness for my company. 

Unfortunately, I can&#39;t just switch this around at the client level. These users are very computer illiterate: and are very likely to freak out from seeing HTTPS &quot;insecurity&quot; errors (especially the way Firefox 3 and Internet Explorer 7 handle it nowadays: FULL STOP, kind of thankfully, but not helping me here LOL).

It&#39;s [very easy][1] [to find][2] [Apache solutions][3] for [http-&gt;https redirection][5], but for the life of me I can&#39;t do the opposite.

Ideas?

  [1]: http://www.cyberciti.biz/tips/howto-apache-force-https-secure-connections.html
  [2]: http://bytes.com/forum/thread54801.html
  [3]: http://support.jodohost.com/showthread.php?t=6678
  [4]: http://wikis.sun.com/display/About/2008/04/30/HTTP-HTTPS+Redirection+Enabled (dead link)
  [5]: http://www.google.com/search?q=https+redirection&amp;ie=utf-8&amp;oe=utf-8&amp;aq=t&amp;rls=org.mozilla:en-US:official&amp;client=firefox-a


How do you redirect HTTPS to HTTP?

Sorry for the basic question - I&#39;m a .NET developer and don&#39;t have much experience with LAMP setups.

I have a PHP site that will allow uploads to a specific folder. I have been told that this folder needs to be owned by the webserver user for the upload process to work, so I created the folder and then set permissions as such:

    chown apache:apache -R uploads/
    chmod 755 -R uploads/

The only problem now is that the FTP user can not modify the uploaded files at all.

Is there a permission setting that will allow me to still upload files and then modify them later as a user other than the webserver user?

What are the proper permissions for an upload folder with PHP/Apache?

What is the difference in terms of functionality between the Apache HTTP Server and Apache Tomcat?

I know that Tomcat is written in Java and the HTTP Server is in C, but other than that I do not really know how they are distinguished. Do they have different functionality?

Difference between the Apache HTTP Server and Apache Tomcat?

Are square brackets in URLs allowed?

I noticed that [Apache commons HttpClient][1] (3.0.1) throws an IOException, wget and Firefox however accept square brackets.

URL example:

    http://example.com/path/to/file[3].html

  [1]: http://hc.apache.org/httpclient-3.x/index.html

My HTTP client encounters such URLs but I&#39;m not sure whether to patch the code or to throw an exception (as it actually should be).

Are square brackets permitted in URLs?

I&#39;ve got an Apache server that has one access log file that is topping 600MB.  This makes it really hard to search the file or parse it.  
What software or modules for Apache are available that will make a daily copy of my access file to make it more manageable?



Best way to rotate Apache log files

I&#39;m looking for a pre-built solution I can use in my RoR application.  I&#39;m ideally looking for something similar to the ASP.NET Forms authentication that provides email validation, sign-up controls, and allows users to reset their passwords.  Oh yeah, and easily allows me to pull the user that is currently logged into the application.

I&#39;ve started to look into the already written pieces, but I&#39;ve found it to be really confusing.  I&#39;ve looked at LoginGenerator, RestfulAuthentication, SaltedLoginGenerator, but there doesn&#39;t seem to be one place that has great tutorials or provide a comparison of them.  If there&#39;s a site I just haven&#39;t discovered yet, or if there is a de-facto standard that most people use, I&#39;d appreciate the helping hand.

Best Solution For Authentication in Ruby on Rails

Has anybody managed to get the Android Emulator working behind a proxy that requires authentication?

I&#39;ve tried setting the -http-proxy argument to 

    http://DOMAIN/USERNAME:PASSWORD@IP:PORT



but am having no success. 

I&#39;ve tried following the docs to no avail. I&#39;ve also tried the `-verbose-proxy` setting but this no longer seems to exist.

Any pointers?

Proxy which requires authentication with Android Emulator

Our company has multiple domains set up with one website hosted on each of the domains. At this time, each domain has its own authentication which is done via cookies. 

When someone logged on to one domain needs to access anything from the other, the user needs to log in again using different credentials on the other website, located on the other domain. 

I was thinking of moving towards single sign on (SSO), so that this hassle can be eliminated. I would appreciate any ideas on how this could be achieved, as I do not have any experience in this regard.

Thanks.

**Edit:**
The websites are mix of internet (external) and intranet (internal-used within the company) sites.

Single Sign On across multiple domains

I have a Google App Engine app - http://mylovelyapp.appspot.com/
It has a page - mylovelypage

For the moment, the page just does `self.response.out.write(&#39;OK&#39;)`

If I run the following Python at my computer:

    import urllib2
    f = urllib2.urlopen(&quot;http://mylovelyapp.appspot.com/mylovelypage&quot;)
    s = f.read()
    print s
    f.close()

it prints &quot;OK&quot;

the problem is if I add `login:required` to this page in the app&#39;s yaml

then this prints out the HTML of the Google Accounts login page

I&#39;ve tried &quot;normal&quot; authentication approaches. e.g.

    passman = urllib2.HTTPPasswordMgrWithDefaultRealm()
    
    auth_handler = urllib2.HTTPBasicAuthHandler()
    auth_handler.add_password(None,
                              uri=&#39;http://mylovelyapp.appspot.com/mylovelypage&#39;,
                              user=&#39;billy.bob@gmail.com&#39;,
                              passwd=&#39;billybobspasswd&#39;)
    opener = urllib2.build_opener(auth_handler)
    urllib2.install_opener(opener)
 
But it makes no difference - I still get the login page&#39;s HTML back.

I&#39;ve tried [Google&#39;s ClientLogin auth API][1], but I can&#39;t get it to work.

    h = httplib2.Http()
    
    auth_uri = &#39;https://www.google.com/accounts/ClientLogin&#39;
    headers = {&#39;Content-Type&#39;: &#39;application/x-www-form-urlencoded&#39;}
    myrequest = &quot;Email=%s&amp;Passwd=%s&amp;service=ah&amp;source=DALELANE-0.0&quot; % (&quot;billy.bob@gmail.com&quot;, &quot;billybobspassword&quot;)
    response, content = h.request(auth_uri, &#39;POST&#39;, body=myrequest, headers=headers)
    
    if response[&#39;status&#39;] == &#39;200&#39;:
        authtok = re.search(&#39;Auth=(\S*)&#39;, content).group(1)
    
        headers = {}
        headers[&#39;Authorization&#39;] = &#39;GoogleLogin auth=%s&#39; % authtok.strip()
        headers[&#39;Content-Length&#39;] = &#39;0&#39;
    
        response, content = h.request(&quot;http://mylovelyapp.appspot.com/mylovelypage&quot;, 
                                      &#39;POST&#39;, 
                                      body=&quot;&quot;, 
                                      headers=headers)
    
        while response[&#39;status&#39;] == &quot;302&quot;:        
            response, content = h.request(response[&#39;location&#39;], &#39;POST&#39;, body=&quot;&quot;, headers=headers) 
    
        print content

I do seem to be able to get some token correctly, but attempts to use it in the header when I call &#39;mylovelypage&#39; still just return me the login page&#39;s HTML. :-( 

Can anyone help, please?

Could I use the [GData client library][2] to do this sort of thing? From
what I&#39;ve read, I think it should be able to access App Engine apps,
but I haven&#39;t been any more successful at getting the authentication working for App Engine stuff there either 

Any pointers to samples, articles, or even just keywords I should be
searching for to get me started, would be very much appreciated.

Thanks!


  [1]: http://code.google.com/apis/accounts/docs/AuthForInstalledApps.html
  [2]: http://code.google.com/p/gdata-python-client/

How do you access an authenticated Google App Engine service from a (non-web) python client?

How do I authenticate against AD using Python + LDAP. I&#39;m currently using the python-ldap library and all it is producing is tears.

I can&#39;t even bind to perform a simple query:

    import sys
    import ldap
    
    
    Server = &quot;ldap://my-ldap-server&quot;
    DN, Secret, un = sys.argv[1:4]
        
    Base = &quot;dc=mydomain,dc=co,dc=uk&quot;
    Scope = ldap.SCOPE_SUBTREE
    Filter = &quot;(&amp;(objectClass=user)(sAMAccountName=&quot;+un+&quot;))&quot;
    Attrs = [&quot;displayName&quot;]
    
    l = ldap.initialize(Server)
    l.protocol_version = 3
    print l.simple_bind_s(DN, Secret)
    
    r = l.search(Base, Scope, Filter, Attrs)
    Type,user = l.result(r,60)
    Name,Attrs = user[0]
    if hasattr(Attrs, &#39;has_key&#39;) and Attrs.has_key(&#39;displayName&#39;):
      displayName = Attrs[&#39;displayName&#39;][0]
      print displayName
    
    sys.exit()

Running this with `myusername@mydomain.co.uk password username` gives me one of two errors:

`Invalid Credentials` - When I mistype or intentionally use wrong credentials it fails to authenticate.

&gt;ldap.INVALID_CREDENTIALS: {&#39;info&#39;: &#39;80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 52e, vece&#39;, &#39;desc&#39;: &#39;Invalid credentials&#39;}

Or 

&gt;ldap.OPERATIONS_ERROR: {&#39;info&#39;: &#39;00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece&#39;, &#39;desc&#39;: &#39;Operations error&#39;}

What am I missing out to bind properly?

I am getting the same errors on fedora and windows.

Authenticating against active directory using python + ldap

My web application has a login page that submits authentication credentials via an AJAX call. If the user enters the correct username and password, everything is fine, but if not, the following happens:

 1. The web server determines that although the request included a well-formed Authorization header, the credentials in the header do not successfully authenticate.
 2. The web server returns a 401 status code and includes one or more WWW-Authenticate headers listing the supported authentication types.
 3. The browser detects that the response to my call on the XMLHttpRequest object is a 401 and the response includes WWW-Authenticate headers. It then pops up an authentication dialog asking, again, for the username and password.

This is all fine up until step 3. I don&#39;t want the dialog to pop up, I want want to handle the 401 response in my AJAX callback function. (For example, by displaying an error message on the login page.) I want the user to re-enter their username and password, of course, but I want them to see my friendly, reassuring login form, not the browser&#39;s ugly, default authentication dialog.

Incidentally, I have no control over the server, so having it return a custom status code (i.e., something other than a 401) is not an option.

Is there any way I can suppress the authentication dialog? In particular, can I suppress the Authentication Required dialog in Firefox 2 or later? Is there any way to suppress the Connect to _[host]_ dialog in IE 6 and later?

---
**Edit**  
_Additional information from the author (Sept. 18):_  
I should add that the real problem with the browser&#39;s authentication dialog popping up is that it give insufficient information to the user.

The user has just entered a username and password via the form on the login page, he believes he has typed them both correctly, and he has clicked the submit button or hit enter. His expectation is that he will be taken to the next page or perhaps told that he has entered his information incorrectly and should try again. However, he is instead presented with an unexpected dialog box.

The dialog makes no acknowledgment of the fact he just _did_ enter a username and password. It does not clearly state that there was a problem and that he should try again. Instead, the dialog box presents the user with cryptic information like &quot;The site says: &#39;_[realm]_&#39;.&quot; Where _[realm]_ is a short realm name that only a programmer could love.

Web broswer designers take note: no one would ask how to suppress the authentication dialog if the dialog itself were simply more user-friendly. The _entire_ reason that I am doing a login form is that our product management team rightly considers the browsers&#39; authentication dialogs to be awful.


How can I suppress the browser&#39;s authentication dialog?

I am checking out the class org.apache.http.auth.
Any more reference or example if anyone has?

How to do HTTP authentication in android?

How do I pass authorization header using cURL? ( executable in `/usr/bin/curl`).

How to set the authorization header using cURL

For some reason, none of the code within

    if (isset($_SERVER[&#39;PHP_AUTH_USER&#39;]) &amp;&amp;
    	isset($_SERVER[&#39;PHP_AUTH_PW&#39;]))
    {
    
    // When the above is set, the code that is here will execute of course
    
    }

is being executed for me. When I enter the correct username and password, the prompt box for the authorization again pops up. Wouldn&#39;t both fields be &#39;set&#39; if they are correct and I press enter? But for some reason that is not the case. What can I be doing wrong?
Thank you.



PHP_AUTH_USER not set?

Here my http basic authentication in the application controller file (application_controller.rb)


    before_filter :authenticate
  
    protected
  
    def authenticate
      authenticate_or_request_with_http_basic do |username, password|
        username == &quot;username&quot; &amp;&amp; password == &quot;password&quot;  
      end
    end

and the default test for the index action of my home controller (spec/controllers/home_controller_spec.rb)

    require &#39;spec_helper&#39;

    describe HomeController do

    describe &quot;GET &#39;index&#39;&quot; do
      it &quot;should be successful&quot; do
        get &#39;index&#39;
        response.should be_success
      end
    end

Test doesn&#39;t run because of the authentication method. I could comment &quot;before_filter :authenticate&quot; to run them but I would like to know if there is way to make them worked with the method.

Thank you!

Content Type	Original Author	Original Content on Stackoverflow
Question	basszero	View Question on Stackoverflow
Solution 1 - Php	Teifion	View Answer on Stackoverflow

How can I get the authenticated user name under Apache using plain HTTP authentication and PHP?

Php Problem Overview

Php Solutions

Solution 1 - Php

SQLStatement.execute() - multiple queries in one statement

Visual Studio "Unable to start debugging on the web server. The web server did not respond in a timely manner."

Attributions