Hi all,

I'm using exUserFolder to authenticate to a Postgres database.

With certain clients, however, authentication information is sent only for protected pages. I have a fair amount of information that is available for anonymous users, and I use _['AUTHENTICATED_USER'] to determine whether to place things like "Edit Preferences" and the like on those pages.

With Lynx, Mozilla 9.1+, and IE 5.5 (I think) the Basic Auth stuff is only sent for the protected pages.

Any ideas on why this is so, and how to fix it?

IIRC, there was a discussion about exactly that on this list some days (weeks) before. The browsers don't have to send the credentials continuosly to every page on your domain, I think cheers, oliver