[RESOLVED] redirecting after login

notaloser

hey, i was wondering how to redirect a user BACK to the page they were trying to access while not being logged in, AFTER they log in.

for example, i try to access page1.php, but i am not logged in so a header("Location: login.php"); directs me to the login page. then i login, and the script redirects me back to page1.php...

i tried this using the $SERVER['HTTP_REFERER'] variable but it doesnt give a value unless the user CLICKS on a link to the next page (redirecting using headers doesnt work)

halojoy

you use
include 'login.php' AND $_SERVER['PHP_SELF']

<?php
// in a page that needs login, the original page
// you use
// if not logged in
include 'login.php';

////////////////////////////////

// in the login.php with login <form>
// you use this
// this will go to original page after SUBMIT
// and of course at the original page
// will be an include of 'login.php' again (if not logged in) 
// for testing Submitted data from <form>
?>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
<input>
<submit>
</form>

say somebody surf to 'index.php'
PHP_SELF will be 'index.php'
and the login.php will be only like a subroutine in 'index.php'
which is included, UNTIL user is successfully logged in.
When is, rest of 'index.php' will be displayed

And if original page is 'members.php', PHP_SELF and the action
will to go back to 'members.php'
.

notaloser

oh ok..

so if a user tries to visit page1.php but is not logged in, and code on page1.php is like

if(!($_SESSION['username'])) {
include("loginform.php");
exit;
}

//rest of page1.php here

and if a user is not logged in, loginform.php will be displayed on the page and the rest will be exited..

but if they are logged in, the entire session if statement is bypassed and the information below is displayed normally? right?

halojoy

yes, and in login.php
you have this
1. see if POST is submitted, if not display login form
2. check if username password is correct, if not display login form again

there are maybe 1.000 such login.php only at this site
submitted in postings
there is probably one such login script posted here EVERY DAY

<?php // login.php

if ($password==$okay){

// set SESSION logged in

}else{

//display login form
exit;

}

// when logged in, script will go on here
// which is actually returning to the original page

?>

this is why you should ONLY have
include 'login.php'
in the original page
( not any exit; )
.