User authorization

[Anon]

Hello,

This is a question regarding user authorization.
I've set of files in my directory and i want to put up a log in screen to enter the user name and password to view any files in the working directory.well, i made it so!
Index.php is my screen for log-in details.

when the user is logged in successfully,main.php will be shown.Now, my question is, when the user tries to view main.php or any other php files in my directory,it should pop up my log-in screen that is index.php.How can i do this?

This is the code which i used for index.php.

<?php
$myuser = "admin";
$mypass = "pass";

if ($user == $myuser && $pass == $mypass)

{
header ('location: main.php');

}

else
{
echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";

}

?>

-----Here follows my HTML code for screen display------------------------------------

Thank you

[john1]

Make the above a function

e.g.

function login () {
-- blah
}

put the function into a common include file e.g. include.inc (or whatever you like)

and then at the top of each script do:

include "include.inc";

login();

• this will work, but you really should crypt the password that you are storing.

[Anon]

To protect a whole directory from the user you should use HTTP Authentication Have you ever used .htaccess files? if you are using Apache then go ahead its more secure for the admin than anything else.

[Anon]

I tried it and it is not working on windows, i dont know why:-/

[Anon]

but it will work on your linux/unix server