htaccess而不是php / mysql登录解决方案

Question

Is is using .htaccess password protection on a website more secure than using php and mysql?

Is it possible to create a custom page that uses the .htaccess mechanism instead of the regular htacces dialogue box.?

Answer 1

HTTP authentication through Apache's .htaccess provides a login mask where the browser asks the user for a username and a password. But then the data inserted by the user is still sent to a server-side program to verify that data.

Which means that interface passes data through HTTP to PHP (for example), which will need a database (MySQL, for example) to store the users data.

.htaccess files may store some users data, but it's not that scalable so it's not recommended. You can't add too many users to Apache's configs.