Authentication

[kursal]

I've been working on user authentication for a web site and decided to use PHP. I have written a code that uses the If command to check the username and password against that stored in a MYSQL database.

My question is this. Is there an easy way to cut and paste either this code or the HTML code so that I do not have to re-write each page??

all the best and thanks in advance for any help

Kursal

[bastien]

write the code to authenticate the user and save it to a file.

then on each page include the line

require("filename.php);

this forces the php engine to include that file and run the script

note that you will need to turn each html page into a php page to force the script to execute...

[kursal]

Thanks but that didn't quite work. Where as it checks the script that I've written I don't know any way to stop the page being processed afterwards.

The authentication basically says find the name that was typed into the name string and then if the password matches print 'sucessfully logged in' and if not print 'wrong user name or password'

is there any way of telling the parser to not process the rest of the page?

Kursal

[bastien]

use exit(); or die();

if ($password==mysql_fetch_row("password")){
header("location:www.somesite.com/nextpage.php");
}else{
echo "not logged in";
echo "hit the back buttonon the browser";
die();
}
//more code

[MytchE]

Create it as a function. Checkout http://www.php.net/function

[Frag]

I wouldn't query the database for a user login and password on every page. Thats just not efficient. You should store the users information in a class object and save it to a session. Then just query the users object. That way you only query the database for the user login and password the first time the logon. Then they are authenticated until there session expires.

Frag