Strange problem with user authentication

spanishsteps

I know everybody would be surprising why i'm posting it in a new thread when theres already a thread exsisting with the same topic.Well, when i tried to post a reply to the last thread, I dont see the message box or the other options to post a message.I tried many times and i could'nt succeed.I tried with other threads to post a reply and they are working fine.
Into my topic now:

I've searched in the forums, found some useful information and changed my code accordingly.
when i point to this location, http://localhost/project/index.php and enter the user name and password it does'nt work.

And when i point to this location, http://localhost/project/template.php, it redirects to index.php and when i enter the user name and password, its working
Please help me out with this one.
thank you
Heres the code for index.php

<?php

session_start();
ob_start();
session_register(logged);
$_SESSION['logged'] = 0;
?>
<html>
<head>
	<title>Account Management Tool</title>
</head>

<body>
<?php
$redirect = $_GET['redirect'];
	if (isset($_POST['submit']))
	{
		if ($_POST['username'] == "admin" && $_POST['password'] == "phpbeginner") 
		{
	$redirect = $_POST['redirect'];
	$_SESSION['logged'] = 1;
	header ("Location: $redirect");
		}
	else
	{
?>
	Invalid Username and/or Password<br><br>
	<form action="index.php" method="post">
	<input type="hidden" name="redirect" value="<? echo $redirect; ?>">
	<table align="center" border="1" width="324" bgcolor="#CCCCCC" bordercolordark="black" bordercolorlight="black">
        <tr>
            <td width="314" height="37">
                <p align="center"><span style="font-size:9pt;"><font face="Verdana">Please enter the user name and the password</font></span></p>
                <p>&nbsp;&nbsp;<span style="font-size:11pt;">&nbsp;</span><font face="Verdana"><span style="font-size:11pt;">User 
                name </span>&nbsp;&nbsp;&nbsp;&nbsp;</font>&nbsp;<input type="text" name="username">&nbsp;</p>
                <p>&nbsp;&nbsp;&nbsp;<span style="font-size:11pt;"><font face="Verdana">Password</font></span> 
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="password" name="password"></p>
                <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="submit" name="submit" value="Login" style="font-family:Verdana;"></p>
                <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</p>
            </td>
        </tr>
    </table>
	</form>
	<?
	}
}
else
{
?>
You must be logged in to view this page<br><br>
<form action="index.php" method="post">
<input type="hidden" name="redirect" value="<? echo $redirect; ?>">
<table align="center" border="1" width="324" bgcolor="#CCCCCC" bordercolordark="black" bordercolorlight="black">
        <tr>
            <td width="314" height="37">
                <p align="center"><span style="font-size:9pt;"><font face="Verdana">Please enter the user name and the password</font></span></p>
                <p>&nbsp;&nbsp;<span style="font-size:11pt;">&nbsp;</span><font face="Verdana"><span style="font-size:11pt;">User 
                name </span>&nbsp;&nbsp;&nbsp;&nbsp;</font>&nbsp;<input type="text" name="username">&nbsp;</p>
                <p>&nbsp;&nbsp;&nbsp;<span style="font-size:11pt;"><font face="Verdana">Password</font></span> 
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="password" name="password"></p>
                <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="submit" name="submit" value="Login" style="font-family:Verdana;"></p>
                <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</p>
            </td>
        </tr>
    </table>
</form>
<?
}
?>
</body>
</html>

DrJonesAC2

It is a little hard to determine exactly what you are going after here. But I am assuming that if a user goes to a page besides index.php, and are not logged in ($SESSION['logged']!=1) they get redirected to the index page.
I am just guessing here, but if they go directly to the index.php the '$GET['redirect']' variable is never passed a value. Therefore, after the script executes there is no place for the script to go.
I posted this on my server to test it out. If you view the source of index.php you get the following snippet:

...<body>

You must be logged in to view this page<br><br>
<form action="index.php" method="post">
<input type="hidden" name="redirect" value="">...

As you can see the value for the hidden field 'redirect' has no value.
I hope this sheds some light on your problem.

spanishsteps

I would be greatful if somebody can help me.
Thanks once again.
Heres the other 2 scripts:
Template.php

<?
include 'auth.inc.php';
?>
<html>
<head>
	<title>Untitled</title>
</head>
<body>
this is template.php
</body>
</html>

auth.inc.php

<?
session_start();
if ($_SESSION['logged'] != 1)
{
$redirect = $_SERVER['PHP_SELF'];
header("Location: index.php?redirect=$redirect");
}
?>

stolzyboy

well this looks very familiar, since it's my code, LOL

anyway, i should have renamed it something other than index.php, probably login.php so you could go there from somewhere else, you can do that to, simply replace every instance of index.php with login.php, then save index.php as login.php, then create a different index.php that looks exactly the same as template.php (of course you can have different content) and give that a go

just don't navigate to login.php straight from your browser, or do some if's to check to see if they didn't come from somewhere else and if so just redirect them to index.php at that point

i did this quickly for someone, and haven't looked at it since, so there are a lot of things you can do

spanishsteps

Theres no doubt Stolzyboy.Its your code.

Well, my first screen is where the admin can login and then proceed further.Cant i use this directly and proceed further???

Or i've written something differently which is'nt really working that great.
when i first point it to index.php, i see the error 2 mesg displaying.
and when i directly point to main.php, i dont see it re-directing to index.php
I read somewhere that i need to add session_name on the top of each page, i want to protect.
It has'nt helped me though.
Any help??
Thanks once again
Heres the one which i tried before:

<?php 
session_name("userinfo");
session_start();

$myuser = "admin";
$mypass = "phpbuilder";

if ($pass =="" || $user=="")
$error= 2;

if (($pass != $mypass && $pass !="") || ($user != $myuser && $user!=""))
$error= 1;

if ($user == $myuser && $pass == $mypass)

{
header ('location: main.php');

}

else
{
echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";

}

?>

<? 

//To check if no user name and password is entered.
	if ($error==1){ 
	echo "<font color=\"#FF0000\" face=\"vendana\" size=\"2\">"; 
	echo "Invalid Login - Please try again"; 
	echo "</font>"; 
	echo "<br>"; 
	session_destroy(); 
} 

//To check if user name and password entered is wrong

if ($error==2){ 
echo "<font color=\"#FF0000\" face=\"vendana\" size=\"2\">"; 
echo "Unauthorized Access - Please Login"; 
echo "</font>"; 
echo "<br>"; 
session_destroy(); 
} 

//To set the form for input

?>

stolzyboy

i think probably that your if's are screwy, try and simplify it

try just

<?
if ($user == "admin" && $pass == "phpbuilder")
{
echo "let them in";
}
else
{
echo "don't let them in ";
}
?>