Checking User Authentication

[Anon]

I am using PHP 4 with session variables.

I want to ensure that the user has logged into the site before viewing specific pages.

If the user remembers the URL they could navigate to it without logging in.

My question is how can I stop a user from viewing pages until they have successfully logged in.

Any help please?

Many Thanks
BB :-)

[Anon]

register a session variable called $username. set this only after a user has logged in through an authentication script.

make sure that at the top of a script you reset any $username variable before you unfreeze the session variable through session_start , so that a user cannot fake a login by using a GPC username=something.

Hope this helps 🙂