村天來了

function authenticate() {
  header('WWW-Authenticate: Basic realm="Test Authentication System"');
  header('HTTP/1.0 401 Unauthorized');
 // Text to send if user hits Cancel button
  echo "You must enter a valid login ID and password to access this resource\n";
  exit;
}

if (!isset($_SERVER['PHP_AUTH_USER']) || ($_POST['SeenBefore'] == 1 && $_POST['OldAuth'] == $_SERVER['PHP_AUTH_USER'])) {
 authenticate();
}
else {
 echo "<p>Welcome: {$_SERVER['PHP_AUTH_USER']}<br>";
 echo "Old: {$_REQUEST['OldAuth']}";
 echo "<form action='{$_SERVER['PHP_SELF']}' METHOD='POST'>\n";
 echo "<input type='hidden' name='SeenBefore' value='1'>\n";
 echo "<input type='hidden' name='OldAuth' value='{$_SERVER['PHP_AUTH_USER']}'>\n";
 echo "<input type='submit' value='Re Authenticate'>\n";
 echo "</form></p>\n";
}

詳細資料請參考
http://linux.tnc.edu.tw/techdoc/php/php_big5/features.http-auth.html

目前我想try try看，是否有可能寫支robot破突這樣的認証機制或則找出漏洞？