>I have a table (dbf file) which contains user names and passwords and other
>fields. I use SSL protocol in web server.
>
>I have found that http basics authentication info (user name and password) is not passed to my app from web server.
>
>I don't want to pass user name and password as
>hidden form variables or query string parameters: those can be read by
>intruder since pages are cached in a local disk.
>Also, I cannot use temporary cookie since this may be disabled.
>My app can read and delete users and this is difficult to syncronize
>this table with web server users table so I cannot use web server buil-in
>page based authentication.
>
>How to implement user authentication in this case ?

I'm not aware of a direct binding for a basic authentication with a data set other than the one from the server. If you find a mechanism to achieve that with a Visual FoxPro backend, I would be interested in knowing it.

If I recall correctly, the basic authentication username is read from REMOTE_USER. This is the server variables that holds that information.

Assuming you would want to benefit of basic authentication bound to a Visual FoxPro table, there is always some approach you could consider. We have implemented some of that in several environments. The concept consists of having a robot which will update the server table by creating the username, its password, its group, its rights, etc. on specific interval when required data has to be sychronized on that table. So, basic authentication can then be as if it would be bound directly to your Visual FoxPro table. You just have to set some basic rules for the synchronization to always be insync with the data on both sides.