Logging Users in with a Flat File

[Anon]

I can't figure out what I'm doing wrong with this script. It will only go through the file and use the first user information It wont go to the next line. You can see this script in action at Http://www.gerbilscentral.com/index.shtml go to the bottom of the page and use the login test, test.

<?PHP
if(!isset($PHP_AUTH_USER)){
header('WWW-Authenticate: Basic realm="Gerbils Central Society"');
header('HTTP/1.0 401 Unauthorized');
echo 'Authorization Required';
exit;
} else if(isset($PHP_AUTH_USER)) {
$filename="/u155/awebking/cgi-bin/society/users.txt";
$fp=fopen($filename, "r");
$file_contents=fread($fp, filesize($filename));
fclose($fp);
$line=explode("\r", $file_contents);
}
for($i=0;$i<=sizeof($line);$i++){
$data_pair=explode(":", $line[$i]);
if(($data_pair[1] == $PHP_AUTH_USER)&&($data_pair[2] == $PHP_AUTH_PW)){
$auth=1;
break;
} else {
$auth=0;
}
}
if($auth=="1"){
echo "<h3>Welcome <a href=mailto:$data_pair[3]>$data_pair[0]</a> to the Gerbils Central Society</h3>";
} else {
header('WWW-Authenticate: Basic realm="Gerbils Central Society"');
header('HTTP/1.0 401 Unauthorized');
echo 'Authorization Required';
exit;
}
?>

you can login successfully with the username: awebking and password: a071584a

This is the first line of information stored in the file users.txt

[kimemax]

did U print datapair[1] ? my guess is that it will have this info "awebking and ", actually I think it´s datapair[0] (im VERY tired now :-)

It would be more convenient for U to just have the allowed logins in the textfile in an array:

$login[awebking] = "a071584a";

then check for login like this:

if($login[$PHP_AUTH_USER] == $PHP_AUTH_PW)
return $auth = 1;
else
return $auth = 0;