<?php

function login__from_env()

{

	return $_SERVER["PHP_AUTH_USER"]

		.($_SERVER["PHP_AUTH_PW"] !== "" ? ":".$_SERVER["PHP_AUTH_PW"] : "");

}

function user2path($user) # multiple @ and nested . OK: a@b.c@url -> url?b.c.a

{

	$path = $user;

	# remove padding used to visually separate elements:__x__@y__@url -> x@y@url

	$path = preg_replace('/\b__|__\b/', '', $path);

	# remove linewraps: x_-_.y@url -> x.y@url

	# the _ are needed to work in Google spreadsheets

	$path = str_replace('_-_', '', $path);

	# remove category comments: x+y@url -> y@url

	# this special syntax is shorter than [x_-_]y@url

	# a UI can replace + with ' ' to produce a linewrap

	# can't use : for this because Firefox will not update the "password" for

	#  the website with the new value after the :

	$path = preg_replace('/^.*?\+/', '', $path);

	# remove insertion comments: [c]x[d]@url -> x@url

	# use [] because in writing, [] denotes insertion

	# insertion indicates that the semantic meaning of the [] portion also

	#  applies, even though it's not included in the linked term name

	$path = preg_replace('/\[.*?\]/', '', $path);

	# remove deletion comments: (-c_-)x@url -> c_x@url

	# use () because in editing, () denotes something to remove

	# the -...- indicate strikethrough (deletion)

	# deletion indicates that the semantic meaning of the () portion does not

	#  apply, even though it's included in the linked term name

	$path = preg_replace('/\(-([^)]*?)-\)/', '$1', $path);

	# translate reverse @-paths into forward .-paths

	$path = implode(".", array_reverse(explode("@", $path)));

	return $path;

}

if (!isset($_SERVER["PHP_AUTH_USER"])) # browser first omits Authorization

{

	header('WWW-Authenticate: Basic realm="'

.'please leave username/password blank or as filled in. '

.'**IMPORTANT**: to visit the homepage of this site, you should always '

.'append \".\": \"'.$_SERVER["HTTP_HOST"].'.\" "');

}

else

{

	$dest = preg_replace('!\b/!', "./", $_SERVER["SCRIPT_URI"])."?";

		# append trailing . to host to prevent infinite redirect loop

	if ($_SERVER["PHP_AUTH_USER"] !== "") # prepend to query string

		$dest .= "."/*force dotpath*/.user2path(login__from_env());

	$dest .= $_SERVER["QUERY_STRING"];

	header("Location: ".$dest);

}

?>