|
I have made my own admin area and login system etc. If no user is logged in then it will provide them with a login form to access the members area. But if a user tries to access the admin area whilst logged in, what error should i throw. Can i throw a 401 error without having to the following as i don't want a popup login box:
header('WWW-Authenticate: Admin Area);
Is it exceptable to throw a 401 error without a "WWW-Authenticate" header, or should i use a 403 error code.
|