User Authentication and Form Session Vairables

cgbrowne

Can anyone give me some guidance as to what I need to do to achieve the following:

I am using DW MX and have set up a user login page etc. Valid users have all been previously set up by an administrator (since we only want to provide access to our business partners) so in addition to UserName and UserPasswords, there are also other contact details (FirstName; Surname; Company; Country).

My question is, when users login, I want to pass the UserID to the 'success' page so I can greet them with the appropriate 'UserFirstName'. Is this possible, since users are only submitting their UserName and UserPassword???

Also, I would like to store and 'remember' their login details in a cookie, but I guess that is another question!

ihenman

hey there,

so assuming you're using PHP and the information you want to get @ is inside a MYsql DB you could do it with this process.

1.)Verify user and password then make a query to the DB for this user to retrieve their name.

i.e.

$connect = mysql_connect("$host", "$user", "$pass") or die("No Connection");
mysql_select_db("$db", $connect);
$sql="SELECT * FROM YourTable WHERE username= \'$username\' and password= \'$password\'", $connect) or die ("couldn't select row.");

$row = mysql_query($sql, $connect);

2.)pass the users name to the welcome page via get in your URL

i.e. yourdomainname.com/welcompage?name=$row[name]

This would give you access to the users name on the following page.

pjleonhardt

Originally posted by ihenman

$sql="SELECT * FROM YourTable WHERE username= \'$username\' and password= \'$password\'", $connect) or die ("couldn't select row.");

thats a little 'sloppy', there's no need to call everything from the database when all you need is the name..

you could do something like

$query = " SELECT name,surname FROM table WHERE username......blah blah blah ";
$row = mysql_query($query);

this is assuming your column names in your table are name and surname of course.

hope this helps.

ihenman

Agreed 'sloppy'we'll say on my part... ;-). If you only require one or two pieces of data from a row why call the whole row and take up the resources!