Active installations10Adoption metric — not a quality score
WordPress.org rating4.0 / 5 from 5 ratings
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records HTTP Digest Authentication version 1.2.1 as active, updated 8y ago and tested up to WordPress 4.9.
Overview
About this plugin
php page using HTTP Digest Authentication with the PHP header() function.
htdigest and works on all web hosting environments.
Important: If you already have a plugin which does HTTP Authentication please deactivate it before activating this plugin. php file please remove it before using this plugin.
htaccess file
+)" PHP_AUTH_DIGEST=$1 </IfModule>
Advantages of HTTP Digest Authentication
Digest Authentication is very much safer than HTTP Basic Authentication whose credentials can be easily decoded with a base64 decoder.
From Wikipedia on HTTP Basic Authentication:
>
The BA (Basic Authentication) mechanism provides no confidentiality protection for the transmitted credentials. They are merely encoded with BASE64 in transit, but not encrypted or hashed in any way.
Digest Authentication on the other hand uses MD5 on the credentials making it “one way”
Uses server and client nonce s to prevent replay attacks
Features of the HTTP Digest Auth plugin
Works using PHP header() function and doesn’t require modification of service config files (like.htaccess, nginx.conf etc)
Supports HTTP credentials for each WordPress user
Clears the HTTP Digest credentials when the user logs out of WordPress (more on this in the FAQ)
Verifies if both the HTTP and WordPress credentials are of the same user (this is the default behavior and can be changed)
Works on all major Web Servers (Tested on Apache, Nginx and Lighttpd)
Plugin Behavior
When this plugin is activated for the first time all WordPress users will have the following Digest credentials
Username: <WordPress username>
Password: password
This can be changed from Users > Your Profile.
After activating this plugin for the first time you’ll be prompted for HTTP credentials when you logout
Similarly if you change your HTTP username or password you’ll be prompted for this when you logout
Available languages
English
Serbo-Croatian by Borisa Djuraskovic
The HTTP Digest Authentication Plugin official homepage.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
http digest
auth
authenticate
hacking
login
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 4.9
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 4.9.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to4.9
Minimum requirementsWordPress 3.1.0 · PHP not listed
Update activity25 Nov 20178y ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
