I have a userlogin form which sends the username and password to this form(logon.php) to validate. Once logged on I have created a $SESSION['valid_user']=$user. I can go into the rest of the web pages but when I try to return to the login.php I have to refresh to view the page. I have tried if(empty($SESSION['valid_user'])){
} along searching this forum with no luck. Any suggestions would be greatly appreciated.
logon.php
<?php session_start();
if(preg_match('/^[a-zæøåÆØÅ0-9_-]{4,}$/i', $_POST['username'])){
$user = $_POST['username'];
}
else {
$error1 .= "<font face='Verdana' size='2' color='#FF0000'>Error: on Text box USERNAME, Do not use invalid characters ? < > . , - + = ~ # @ | \ / '' ' : ; { } [ ] * ^ ! etc.";
}
if(preg_match('/^[a-zæøåÆØÅ0-9_-]{4,}$/i', $_POST['password'])){
$passw = md5($_POST['password']);
}
else {
$error2 .= "<font face='Verdana' size='2' color='#FF0000'>Error: on Text Box PASSWORD, Do not use invalid characters ? < > . , - + = ~ # @ | \ / '' ' : ; { } [ ] * ^ ! etc.";
}
$hostname = $_SERVER['REMOTE_ADDR'];
include("db.inc.php");
$conn = mysql_connect($host, $username, $password) or die(mysql_error());
mysql_select_db($database,$conn) or die(mysql_error());
$query="SELECT * FROM land WHERE username ='$user' and password ='$passw'";
$result = mysql_query($query) or die ("Could not run query.");
if (mysql_num_rows($result) == 1) {
//if authorized, get the values of username
$landlordloid=mysql_result($result,0, 'id');
$user = mysql_result($result,0, 'username');
$date = mysql_result($result,0,"date");
$new = date('H:i:s Y-m-d', $date);
$ts = mktime(0,0,0,substr($date,5,2),substr($date,8,2),substr($date,0,4)); // Convert to unix format
$formated = date('d-m-Y',$ts);
$_SESSION['valid_user']=$user;
$_SESSION['reg_id']=$landlordloid;
$_SESSION['password']=$passw;
$_SESSION['username']=$user;
} else {
echo "<td align='center'><font face='Verdana' size='2' color='#FF0000'>Login Failed. <br />[<a href=userlogin.php>Go back and try again</a>]<br><br>";
echo "<font face='Verdana' size='2' color='#FF0000'>NOTE: Your Member Username must be entered exactly as when you registered<br><br>";
echo "<font face='Verdana' size='2' color='#FF0000'>NOTE: Your Member Password must be entered exactly as issued by us. </font></td><br><br>";
echo "$error1<br><br>";
echo "$error2<br>";
exit;
}
?>
