I have looked at the scripts that are called when logging in/out and have not the ability to find any HTML before the header script is called. (I hope I said that dorrectly)
I think I have tried everything that has been suggested so far.
Could it possibly be anything else? I do notice that index.php is called in one of the login scripts. Does that mean that it should go to the main page?
Here are the login scripts one-by-one:
logout.php
<?
include "includes/config.inc.php";
session_name($SESSION_NAME);
session_unregister("PHPAUCTION_LOGGED_IN");
session_unregister("PHPAUCTION_LOGGED_IN_USERNAME");
Header("Location: index.php");
exit;
?>
login.php
<?
include "includes/config.inc.php";
if($action && $username && password)
{
$query = "select id from PHPAUCTION_users where nick='$username' and password='".md5($MD5_PREFIX.$password)."' and suspended=0";
$res = mysql_query($query);
//print $query;;
if(mysql_num_rows($res) > 0)
{
$PHPAUCTION_LOGGED_IN = mysql_result($res,0,"id");
$PHPAUCTION_LOGGED_IN_USERNAME = $HTTP_POST_VARS[username];
session_name($SESSION_NAME);
session_register("PHPAUCTION_LOGGED_IN","PHPAUCTION_LOGGED_IN_USERNAME");
}
}
Header("Location: $HTTP_REFERER");
exit;
?>
user_login.php
<?
/*
include "./includes/messages.inc.php";
include "./includes/config.inc.php";
include "./includes/countries.inc.php";
if(empty($action))
{
$action = "login";
}
if ($HTTP_POST_VARS[action] != "login")
{
include "header.php";
include "templates/template_user_login_php.html";
}
if ($HTTP_POST_VARS[action] == "login")
{
$query = "select id from PHPAUCTION_users where nick='$username' and password='".md5($MD5_PREFIX.$password)."' and suspended=0";
$res = mysql_query($query);
//print $query;;
if(mysql_num_rows($res) > 0)
{
$PHPAUCTION_LOGGED_IN = mysql_result($res,0,"id");
$PHPAUCTION_LOGGED_IN_USERNAME = $HTTP_POST_VARS[username];
session_name($SESSION_NAME);
session_register("PHPAUCTION_LOGGED_IN","PHPAUCTION_LOGGED_IN_USERNAME");
Header("Location: user_menu.php");
exit;
}
else
{
$TPL_err=1;
$TPL_errmsg = $ERR_038;
include "header.php";
include "templates/template_user_login_php.html";
}
}
if ($REQUEST_METHOD=="POST" && $action=="update")
{
if ($TPL_email && $TPL_address && $TPL_city && $TPL_country && $TPL_zip && $TPL_phone && TPL_nletter)
{
if (strlen($TPL_password)<6 && strlen($TPL_password) > 0)
{
$TPL_err=1;
$TPL_errmsg=$ERR_011;
}
else if ($TPL_password!=$TPL_repeat_password)
{
$TPL_err=1;
$TPL_errmsg=$ERR_109;
}
else if (strlen($TPL_email)<5) //Primitive mail check
{
$TPL_err=1;
$TPL_errmsg=$ERR_110;
}
else if (strlen($TPL_zip)<5) //Primitive zip check
{
$TPL_err=1;
$TPL_errmsg=$ERR_616;
}
else if (strlen($TPL_phone)<3) //Primitive phone check
{
$TPL_err=1;
$TPL_errmsg=$ERR_617;
}
else
{
$TPL_birthdate = substr($TPL_birthdate,6,4).
substr($TPL_birthdate,0,2).
substr($TPL_birthdate,3,2);
$sql="UPDATE PHPAUCTION_users SET email=\"". AddSlashes($TPL_email)
."\", birthdate=\"". AddSlashes($TPL_birthdate)
."\", address=\"". AddSlashes($TPL_address)
."\", city=\"". AddSlashes($TPL_city)
."\", prov=\"". AddSlashes($TPL_prov)
."\", country=\"". AddSlashes($TPL_country)
."\", zip=\"". AddSlashes($TPL_zip)
."\", phone=\"". AddSlashes($TPL_phone)
."\", nletter=\"". AddSlashes($TPL_nletter);
if(strlen($TPL_password) > 0)
{
$sql .= "\", password=\"". md5($MD5_PREFIX.AddSlashes($TPL_password));
}
$sql .= "\" WHERE id='". AddSlashes($TPL_id_hidden)."'";
$res=mysql_query ($sql);
include "header.php";
include "templates/template_updated.html";
}
}
else
{
$TPL_err=1;
$TPL_errmsg=$ERR_112;
}
}
include "footer.php";
$TPL_err=0;
$TPL_errmsg="";
?>
user_menu.php
<SCRIPT Language=PHP>
*/
// Include messages file
require('./includes/messages.inc.php');
// Connect to sql server & inizialize configuration variables
require('./includes/config.inc.php');
#// If user is not logged in redirect to login page
if(!isset($HTTP_SESSION_VARS["PHPAUCTION_LOGGED_IN"]))
{
Header("Location: user_login.php");
exit;
}
</SCRIPT>
<HTML>
<HEAD>
<TITLE><? print $SETTINGS[sitename]?></TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" >
<?
require("header.php");
include "templates/template_user_menu_php.html";
include "./footer.php";
?>
</BODY>
</HTML>
