Question about enforcing security using Session ids.

[trandom]

Hello,

I have written (what I think is) a reasonable joining function and a user management system.

I won't bore you with details - but I have a REALLY basic question :

I want to have certain web pages on my website just for the registered members - and when they login it starts a new session.

Lets pretend I have a page called "membersonly.php" - what whould I have to put in that page so that it was locked out when other viewers came along or the user was not logged in?

Please write back soon

Sorry for my Ignorance.

Andrew

[slaya]

it would be easyer if you showed us your script..

if(($entered_username == $actual_username) && ($entered_pass == $actual_pass)) {
echo "You are logged in";
} else {
echo "This page is only for members";
}

[trandom]

Thanks - it's so simple!

I didn't relise that that's all you would have to do!

Does this mean that I don't require session id's at all?

[slaya]

You dont HAVE TO, but it would be a nice feature. What I gave you is as simple as it gets but does work.