PHP form, what to use next?

madcat

Hi all-

I have a variable that I place a form in:

<?php

$the_form = "
html form stuff...
;"

Within that form, I would like to put PHP variables carried over from another script, but can't see how to do this.

For example,

<?php

$the_form = "
<?php
$var1 = \"$POST[this]\";
$var2 = \"$POST[that]\";
?>
html form stuff...
;"

Those variables are sensitive passwords, and the only way my script will work is if they are included when pressing submit on this form. I can inlcude them as input type="hidden", but then you can see the passwords.

So basically, how can I put these variables in the form so that they can't be seen but still processed?

Thanks for any help!

Dedix

Why don't you use md5 hash passwords?

phpr0ck5

You should validate the password in the beginning and register a variable that 'approves' that authentication. Something like

$valid = "yes";
session_register(valid);

$valid = "no";
session_register(valid);

madcat

phpr0ck5- I've got both a login form and an HTML form in the variables ($login, $the_form) respectively. This is all in one script by the way.

The user has no problem getting past the login based on username/passwords checked in a mysql database- the problem is when they try to submit the actual HTML form, the login script pops back up becuase it gets stuck on previous conditions (this case: if not username or password: show login). So somehow, I need the the username/password values to be carried with the HTML form so it doesn't get stuck.

After starting a session at the top of the page, would I be including that $valid variable in an hidden input field with the HTML form? I've been trying with that scenario but nothing is working. I'm primarily trying to figure out how sessions can get me out of this jam, not having the proper variables sent to the HTML form so the code can be executed and emailed off.

Thanks for your help!

phpr0ck5

Can't you change the pages that are requiring user/pass ?
Make them require valid auth from some other 'registered'
variable?

if not, [post] doesn't show in the address bar, [get] does,
as action types for the html form.