[SlugBug] htaccess sessions

[David Leadbeater]

Jonathan wrote:
> Hi all,
> 
> Is it possible to end an htaccess session without having to restart the 
> web browser concerned?

You tell it the password it is sending is wrong..
[..]

> Anyone got any ideas?

Write a CGI script (or PHP or ..) which returns a HTTP 401 status code
and the WWW-Authenticate header..
for example in Perl:

#!/usr/bin/perl
print join "\r\n",
	'Status: 401',
	'WWW-Authenticate: Basic realm="Login"',
	'Content-type: text/html',
	'',
	'Please authenticate',
	'';