Log-in Form help! Worked fine before I changed the buttons to images.

ph8edsicness

<HTML>
<HEAD>
  <TITLE>Members</TITLE>
</HEAD>
<BODY BGCOLOR="#000000" TEXT="#FFFFFF" LINK="#FFFFFF" ALINK="#FFFFFF" VLINK="#FFFFFF">
<CENTER>
<IMG SRC="images/members.gif" ALT="Member Section">
</CENTER>
<?
function form() {
?>
<FORM NAME="login" METHOD="post" ACTION="<? echo $PHP_SELF; ?>">
<TABLE WIDTH="300" BORDER="0" ALIGN="center" CELLPADDING="0" CELLSPACING="0">
  <TR>
    <TD BGCOLOR="#000000">
      <TABLE WIDTH="100%" BORDER="0" ALIGN="center" CELLPADDING="0" CELLSPACING="1">
        <TR BGCOLOR="#000000"> 
          <TD WIDTH="40%" BGCOLOR="#000000"><STRONG><FONT COLOR="#FFFFFF">&nbsp;&nbsp;&nbsp;<IMG SRC="images/members_user.gif" WIDTH="100" HEIGHT="20"></FONT></STRONG></TD>
          <TD WIDTH="60%" BGCOLOR="#000000"><FONT COLOR="#FFFFFF"> &nbsp;&nbsp; 
            <INPUT NAME="name" TYPE="text" ID="name" STYLE="background-color: #000000; font-size: 12; color: #FFFFFF; font-family: Verdana">
            </FONT></TD>
        </TR>
        <TR BGCOLOR="#000000"> 
          <TD BGCOLOR="#000000"><STRONG><FONT COLOR="#FFFFFF">&nbsp;&nbsp;&nbsp;<IMG SRC="images/members_pass.gif" WIDTH="100" HEIGHT="20"></FONT></STRONG></TD>
          <TD BGCOLOR="#000000"><FONT COLOR="#FFFFFF"> &nbsp;&nbsp; 
            <INPUT NAME="pass" TYPE="password" ID="pass" STYLE="background-color: #000000; border-style:1px; font-size: 12; color: #FFFFFF; font-family: Verdana">
            </FONT></TD>
        </TR>
        <TR ALIGN="CENTER" BGCOLOR="#000000"> 
          <TD COLSPAN="2"><FONT COLOR="#000000">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</FONT><FONT COLOR="#FFFFFF"> 
            <INPUT TYPE="image" NAME="Submit" SRC="images/members_submit.gif" WIDTH="75" HEIGHT="30" BORDER="0" ALT="Submit" VALUE="Submit">
            <INPUT TYPE="image" NAME="Submit2" SRC="images/members_reset.gif" WIDTH="61" HEIGHT="30" BORDER="0" ALT="Reset" VALUE="Reset">
            </FONT></TD>
        </TR>
      </TABLE></TD>
  </TR>
</TABLE></FORM>
<?
}
?>
<HTML>
<HEAD>
  <TITLE>Log-in</TITLE>
  <META http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</HEAD>
<BODY BGCOLOR="#000000" FONT="#FFFFFF" LINK="#FFFFFF" ALINK="#FFFFFF" VLINK="#FFFFFF">

<?
if ($_REQUEST["Submit"] == "Submit") {
/***** Set usernames and paswords here *****/
$passwords = array("user1" => "pass1",
         	   "user2" => "pass2",
	           "user3" => "pass3");

$username = $_REQUEST["name"];

if ($_REQUEST["pass"] == $passwords[$username]) {
   /***** check login info *****/     

        $check_file = "tmp/".$username;
         if( $fp = @fopen("$check_file", "r") ) {
               print "User by this name is already logged in.";
               @fclose($fp);
           } else {
   /***** Save login info *****/
          $filename = "tmp/".$username;
          touch ($filename);

      setcookie("username", $_REQUEST["name"], time()+1200);

      /***** Now to redirect to secure.php page *****/
      echo "<meta http-equiv=\"refresh\" content=\"0;url=members2.php\">";
      echo $_COOKIE["username"].", Welcome $username";            
        @fclose($fp);
    }

//redirect to secure page
} else {
       setcookie("username", "", time()-3600);
//redirect to login
echo "<br>Access Denied. Restricted entry.<br>";
form();
}
return;
}

/***** Load form *****/
form();
?>
</body>
</html>

zhabala

As you can read in HTML specification:

input type image

Creates a graphical submit button. The value of the src attribute specifies the URI of the image that will decorate the button. For accessibility reasons, authors should provide alternate text for the image via the alt attribute.
When a pointing device is used to click on the image, the form is submitted and the click coordinates passed to the server. The x value is measured in pixels from the left of the image, and the y value in pixels from the top of the image. The submitted data includes name.x=x-value and name.y=y-value where "name" is the value of the name attribute, and x-value and y-value are the x and y coordinate values, respectively.

If the server takes different actions depending on the location clicked, users of non-graphical browsers will be disadvantaged. For this reason, authors should consider alternate approaches:

So there is not $REQUEST['Submit'] as you expect, but there are $REQUEST['Submit_x'] and $_REQUEST['Submit_y'] variables which can be used to determine which button the user pressed.

Zdenek

ph8edsicness

So what do you suggest I do... i'd prefer to use my custom images but the way i understand it, submit.x where x=coordinate on the image the button will only work if that cooridnate is clicked on.

ph8edsicness

Anybody? Help is greatly appreciated.

zhabala

you have to only check whether the variable exists, like this:

if ( isset($_REQUEST['Submit_x']) and !empty($_REQUEST['Sumbit_x']) ) {
       The Sumbit button pressed;
} else {
       .....................
}

ph8edsicness

So i replace this:

if ($_REQUEST["Submit"] == "Submit")

with this:

if ( isset($_REQUEST['Submit_x']) and !empty($_REQUEST['Sumbit_x']) ) {
       The Sumbit button pressed;
} else { //rest of the script...
}

ph8edsicness

Okay for now I'm just gonna use the default submit buttons so the script works... now a new prob arises:

Warning: unable to create file tmp/User because Permission denied in /usr/local/plesk/apache/vhosts/mysite.com/httpdocs/members.php on line 66

Here's the code line 66 is in. it's the section that saves the log-in info

   /***** Save login info *****/
          $filename = "tmp/".$username;
          touch ($filename);

      setcookie("username", $_REQUEST["name"], time()+1200);

      /***** Now to redirect to secure.php page *****/
      echo "<meta http-equiv=\"refresh\" content=\"0;url=members2.php\">";
      echo $_COOKIE["username"].", welcome back! You will be transferred to the members page momentarily.";            
        @fclose($fp);
    }

Now I try to set the chmod with my ftp client to owner group and everyone to read and write or 666. However when I close the ftp session the folder reverts back to its previous state. Is there anyway around this?