Best PHP authorization script?

[Entity]

I've looked around quite a bit at hotscripts, and frankly, every script I've tried so far for PHP authorization sucks major donkey balls. I've considered programming my own, but my boss has basically told me to find something that is pre-packaged - he doesn't want to be spending money programming things that already exist. Consequently, I'm in the search for the best PHP authorization script out there. What I'm trying to accomplish is this:

Through the use of a simple include, I'd like to make sure that before a user can view/use a particular php page, they must be logged in. We would prefer the logins and passwords (in encrypted form) to be stored in a specified MySQL database. The easier to configure the better, but hopefully it is fairly secure as well.

Anyone have a recommendation?

thanks,
Rob

 

[kt]

While I understand where your boss is coming from, I would still prefer to write my own. The time you spend on trying to find the right script, you could've written up one yourself. How do I know this? Well, like him I thougth the same thing. Why reinvent the wheel? So, I went looking for one on hotscripts and found out why they were free! Most doesn't support some features I want, etc. So, after spending a good hour trying to find the right script I got frustrated and sat down for 30 minutes and pump one out myself.

 

[Buddha Bart]

I've always gotten lazy and just used the webserver's authentication. There are already modules for apache to get it to authenticate against a mysql database too.

bart

 

[Need4Speed]

why not just use htaccess?

 

[kt]

Originally posted by: Need4Speed
why not just use htaccess?

Because htaccess will not just protect one page, it protects the whole directory. It would be a pain in the ass if the pages he wants to protect are in multiple directories with some pages that should be unprotected.

 

[Need4Speed]

I beg to differ....File Directive for Apache

 

[Need4Speed]

"<Files> sections can be used inside .htaccess files. This allows users to control access to their own files, at a file-by-file level. For example, to password protect a single file within a particular directory, you might add the following to your .htaccess file:

<Files admin.cgi>
Require group admin
</Files>"

 

[joinT]

Originally posted by: Need4Speed
I beg to differ....File Directive for Apache

don't beg d00d, lay the smack down~! hee hee

 

[Need4Speed]

well then consider this as smack laid down