Login Script

NZ_Kiwi

Hi All,

I need help with a user login script. I have a signup form which has key fields such as username password and admin with values or 1 user 2 mod user and 3 super admin!

now what I need to make is alogin form with a auth page which will work out if the username and passwords match and then work out what setting they have ie: 1, 2 or 3! and then set the cookies. I want to have a page (or two or three I guess depending on the setting for the protected page) which i can include on any pages which will then either confirm there level and show the information or say sorry and direct the person to the register or login form!

I have looked around but most scipts don't have have this or they have other information with it. I believe this sort of page should be very easy to make can someone pleae help. I can add reference to my wesite if you can help.

Thanks

maqmus

If you'll have a page for each admin level you don't need to make 3 pages, you only have to set the cookie with the admin level (I like it better with session). And before your page content an if() statement would be enough.

if($_COOKIE['admin_level']==1) {
//Show the content you want
echo $my_text_one; }
elseif($_COOKIE['admin_level']==2) {
echo $content_two; }
elseif($_COOKIE['admin_level']==3) {
echo $content_three; }
else echo "You're not authorized";

You could use switch() to avoid all the if and elseif.

eli03

http://www.beanbug.net/vScripts.php maythis scrip will help. try to download vuthenticate

NZ_Kiwi

Sorry

NZ_Kiwi

Originally posted by NZ_Kiwi
Ok so a user will enter their username and password in a form a it will take them to a login.php page which will have

checkuser.php page

<?PHP
//connect to database I know how this works.

//get information from form and match it off against my mysql table and if it does match sett the cookie to eihter "1", "2" or "3" depending on there admin_level.
// After it has set this it would redirect the user to the main page! with them logged in! Need help with this.
?>

page.php just one page which has been blocked to everyone but users

<?PHP
//Don't know how to start this page.

//First I need to see if they have logged on if not direct them to login.php page for them to log on. 

//after it has confirmed they have loged on just run this script on the page

if($_COOKIE['admin_level']==1) {
//Show the content you want
echo $my_text_one; }
elseif($_COOKIE['admin_level']==2) {
echo $content_two; }
elseif($_COOKIE['admin_level']==3) {
echo $content_three; }
else echo "You're not authorized";
?>

can you help more?? [/B]

maqmus

In checkuser.php you can use header("Location: page.php") to redirect them if login matches. Let's say:

if($login=="succes") {
header("Location: page.php"); }
else { header("Location:login.php"); }

Then in page.php you have multiple choices. One would be the code I posted. Another option could be:

if($_COOKIE['admin_level']==3) {
include "superadmim_page.php"; }
elseif($_COOKIE['admin_level']==2) {
include "member_page.php"; }
elseif($_COOKIE['admin_level']==1) {
include "guest_page.php"; }
else { header("Location:login.php"); }

NZ_Kiwi

Originally posted by maqmus
In checkuser.php you can use header("Location: page.php") to redirect them if login matches. Let's say:
if($login=="succes") {
header("Location: page.php"); }
else { header("Location:login.php"); }

Let me work on one at a time. Let me work on checkuser.php page to start with.

<?PHP
mysql_connect (localhost, username,  password);
mysql_select_db (Table);

// Need help on the code to get entered information from the 
//login form ie username and password and to match it with a sql 
//query and to then set the cookies as "1", "2", "3" depending on the user level.

if(($username==$mysql_username) && $user_passw==$mysql_user_passw) { 
setcookie("admin_level",$mysql_admin_level,time() + 3600); 
header("Location: page.php"); } 
else { header("Location: login.php"); }

maqmus

I used $login=="success", cause I don't know your code.

If the login matches you have to set it somehow.
I don't know MySql, but you have to set something like this:

if(($username==$mysql_username) && $user_passw==$mysql_user_passw) {
setcookie("admin_level",$mysql_admin_level,time() + 3600);
header("Location: page.php"); }
else { header("Location: login.php"); }

NZ_Kiwi

Originally posted by maqmus
I used $login=="success", cause I don't know your code.

If the login matches you have to set it somehow.
I don't know MySql, but you have to set something like this:
if(($username==$mysql_username) && $user_passw==$mysql_user_passw) {
setcookie("admin_level",$mysql_admin_level,time() + 3600);
header("Location: page.php"); }
else { header("Location: login.php"); }
[/B]

thank you so much. can anyone else help out more?