Secure Pages

kaos057

Ok, I have a page on my site that is available to members to get information and edit their profile. How would I go about making it so people cant just type in the address of the page and get there? Also how would I make it so members cant just change their name in the address bar to access another member's info.

leatherback

Hi,

Create a usertable with name / password.
When the page is calle, you check in the databast wether the user-login time is less then a certain amount of time ago. If so: Load the edit page, based on username.
If the logintime is too long ago, you show a login screen, user submits details. You check details in the database. If the details are ok, you reset the login time to now() and load the page the user requestd.

kaos057

Ok that sounds cool so how would I go about checking when they logged in? Do I need to add a field for login time and add a query that adds the time each time someone logs in? Or is there a function that can tell when the last time that certain field was accessed?

kaos057

ok i came up with an easier way. I made it send the encrypted password from the verify page to the secure page and then the secure page checks to make sure the encrypted password and username go together. If they dont they go to a different page. In order to make the page unaccessable by just going to the page, I used a session check type line and opened a session on the verify page.

planetsim

Although the password is encrypted you should never use it to check if a persons logged in or not.