Login Problem

newphpcoder

Good day!

I created a webpage and it has a login page...I want that if the user was already login and she accidentally press the back button if the login page was view again she could not login again because she was already login..

I try to use session but i think it does not work. I have no idea on what code should i need to fix my problem.

here is my code:

<?php  

session_start(); 
//require_once 'conn.php';  

$db_name="dspi"; 

mysql_connect("localhost", "root", "") or die("Cannot connect to server");
mysql_select_db("$db_name")or die("Cannot select DB");   


    $department = mysql_real_escape_string($_POST['department']);   
    $username = mysql_real_escape_string($_POST['username']); 

    $sql=mysql_query("SELECT `Department`, `Username` FROM `tbllogin` WHERE `Department` = '{$department}' AND Username = '{$username}'") or die(mysql_error()); 
    $ct = mysql_num_rows($sql); 

    if($ct == 1) { 
        $row = mysql_fetch_assoc($sql);  

        if($row['Department']=='Accounting') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='Engineering') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='Finishing_Goods') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='HRAD') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='MIS') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Packaging_and_Design') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Production') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Purchasing_Logistic') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='QA_and_Technical') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Supply_Chain') { 
            header('location:Company.php'); 
        } 
        else {
			header('location:index.php');
			echo"Incorrect Username or Department"; 

        	}  
}
?> 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>DSPI LOGIN</title>
<script> 
        function searchKeyPress(e) 
        { 
                // look for window.event in case event isn't passed in 
                if (window.event) { e = window.event; } 
                if (e.keyCode == 13) 
                { 
                        document.getElementById('submit').focus(); 
                } 
        } 
        </script>
<style type="text/css"> 
<!--
BODY { 
background-image: url(layout_image/bgroundv09.png);
background-attachment: fixed; 
} 
#Dept_Frame {
	position:absolute;
	width:229px;
	height:49px;
	z-index:1;
	left: 441px;
	top: 262px;
}
#Department_Option {
	position:absolute;
	width:186px;
	height:32px;
	z-index:2;
	left: 453px;
	top: 275px;
}
#Submit_Frame {
	position:absolute;
	width:82px;
	height:35px;
	z-index:3;
	left: 516px;
	top: 320px;
}
#Submit_Button {
	position:absolute;
	width:60px;
	height:29px;
	z-index:4;
	left: 524px;
	top: 328px;
}
#Username_ImageText {
	position:absolute;
	width:130px;
	height:55px;
	z-index:5;
	left: 319px;
	top: 208px;
}
#User_Frame {
	position:absolute;
	width:230px;
	height:46px;
	z-index:6;
	left: 441px;
	top: 216px;
}
#Username_Textbox {
	position:absolute;
	width:182px;
	height:23px;
	z-index:7;
	left: 455px;
	top: 228px;
}
--> 
</style>  

</head>
<body>
<form id="form1" name="form1" method="post" action="">
  <div id="Department_Option">
    <select name="department" onkeypress="searchKeyPress(event);">
      <option>Choose your Department. . . . . . </option>
      <option value="Accounting" <?php if($_POST['department'] == 'Accounting') echo "selected='selected'"; ?>>Accounting</option>
      <option value="Engineering" <?php if($_POST['department'] == 'Engineering') echo "selected='selected'"; ?>>Engineering</option>
      <option value="Finishing_Goods" <?php if($_POST['department'] == 'Finishing_Goods') echo "selected='selected'"; ?>>Finishing Goods</option>
      <option value="HRAD" <?php if($_POST['department'] == 'HRAD') echo "selected='selected'"; ?>>HRAD</option>
      <option value="MIS" <?php if($_POST['department'] == 'MIS') echo "selected='selected'"; ?>>MIS</option>
      <option value="Packaging_and_Design" <?php if($_POST['department'] == 'Packaging_and_Design') echo "selected='selected'"; ?>>Packaging and Design</option>
      <option value="Production" <?php if($_POST['department'] == 'Production') echo "selected='selected'"; ?>>Production</option>
      <option value="Purchasing_Logistic" <?php if($_POST['department'] == 'Purchasing_Logistic') echo "selected='selected'"; ?>>Purchasing and Logistics</option>
      <option value="QA_and_Technical" <?php if($_POST['department'] == 'QA_and_Technical') echo "selected='selected'"; ?>>QA and Technical</option>
      <option value="Supply_Chain" <?php if($_POST['department'] == 'Supply_Chain') echo "selected='selected'"; ?>>Supply Chain</option>
    </select>
  </div>
  <div id="Submit_Button">
    <input type="Submit" name="submit" value="Submit" id="submit" onclick="doSomething();"/>
  </div>
  <div id="Dept_Frame"><img src="layout_image/subframev02.png" width="229" height="50" /></div>
  <div id="Submit_Frame"><img src="layout_image/subframev02.png" width="80" height="46" /></div>

<div id="Username_ImageText"><img src="layout_image/userv01.png" width="131" height="62" /></div>
<div id="User_Frame"><img src="layout_image/subframev02.png" width="229" height="50" /></div>
<div id="Username_Textbox">
  <input name="username" type="text" size="30" />
</div>
</form>
</body>
</html>

dagon

how do you know they are currently logged in? what do you check on say Company.php to make sure they are logged in?

newphpcoder

dagon;10962516 wrote:
how do you know they are currently logged in? what do you check on say Company.php to make sure they are logged in?

If the user login if the username is correct and the department is correct also after they press the submit button automatically they can go to the company page.if the username and department is invalid they cannot view th company page

dagon

I don't see what stops them entering Company.php

anoopmail

nd this code is incorrect

else {
                header('location:index.php');
                echo"Incorrect Username or Department";

newphpcoder

anoopmail;10962531 wrote:
nd this code is incorrect
else {
                header('location:index.php');
                echo"Incorrect Username or Department"; 

your right that code was not work,i don't know why and i don't know what should be the coe for that..when i input wrong username and department and i press the submit button no error appear and also the echo "Incorrect Username and Department" was not appear.

kingdm

newphpcoder;10962748 wrote:
your right that code was not work,i don't know why and i don't know what should be the coe for that..when i input wrong username and department and i press the submit button no error appear and also the echo "Incorrect Username and Department" was not appear.

The text "Incorrect Username and Department" surely won't appear as on what you want, because the page is redirected to index.php and the echo you placed right after the header() well should I say left on that page.

If I were to print the string "Incorrect Username and Department", I'll have this else :

else { 
                $_SESSION['dummy'] = 1;
                header('location:index.php'); 
}

Then assuming this is my index.php

<?php
session_start();
if($_SESSION['dummy'] == 1) {
$text = "Incorrect Username and Department";
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml">
<?php echo $text; ?>
</html>

anoopmail

 header('location:index.php?status=badusername');

nd in index.php

<?php
if($_GET['status'] && $_GET['status'] == 'badusername') {
$msg = "Incorrect Username and Department";
}
?>
<html>
<?php echo $msg; ?>  

. . .

newphpcoder

Good day!

I have a index.php or a login page, but when i successfully login and I accidentally press the back button the login page was appear and when i try to login again to test if I could login again, sad to say i login again, which i don't want to happen..

Here is my code:

<?php  

session_start(); 

//require_once 'conn.php';  

$db_name="dspi"; 

mysql_connect("localhost", "root", "") or die("Cannot connect to server");
mysql_select_db("$db_name")or die("Cannot select DB");   


    $department = mysql_real_escape_string($_POST['department']);   
    $username = mysql_real_escape_string($_POST['username']); 

    $sql=mysql_query("SELECT `Department`, `Username` FROM `tbllogin` WHERE `Department` = '{$department}' AND Username = '{$username}'") or die(mysql_error()); 
    $ct = mysql_num_rows($sql); 

    if($ct == 1) { 
        $row = mysql_fetch_assoc($sql);  

        if($row['Department']=='Accounting') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='Engineering') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='Finishing_Goods') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='HRAD') { 
            header('location: Company.php'); 
        } elseif($row['Department']=='MIS') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Packaging_and_Design') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Production') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Purchasing_Logistic') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='QA_and_Technical') { 
            header('location:Company.php'); 
        } elseif($row['Department']=='Supply_Chain') { 
            header('location:Company.php'); 
        } 
        else {
			header('location:index.php');
			echo"Incorrect Username or Department"; 

        	}  
}
?> 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>DSPI LOGIN</title>
<script type="text/javascript">                

function handleEnter (field, event) {
		var keyCode = event.keyCode ? event.keyCode : event.which ? event.which : event.charCode;
		if (keyCode == 13) {
			var i;
			for (i = 0; i < field.form.elements.length; i++)
				if (field == field.form.elements[i])
					break;
			i = (i + 1) % field.form.elements.length;
			field.form.elements[i].focus();
			return false;
		} 
		else
		return true;
	}      

</script>
<style type="text/css"> 
<!--
BODY { 
background-image: url(layout_image/bgroundv09.png);
background-attachment: fixed; 
} 
#Dept_Frame {
	position:absolute;
	width:229px;
	height:49px;
	z-index:1;
	left: 441px;
	top: 262px;
}
#Department_Option {
	position:absolute;
	width:186px;
	height:32px;
	z-index:2;
	left: 453px;
	top: 275px;
}
#Submit_Frame {
	position:absolute;
	width:82px;
	height:35px;
	z-index:3;
	left: 516px;
	top: 320px;
}
#Submit_Button {
	position:absolute;
	width:60px;
	height:29px;
	z-index:4;
	left: 524px;
	top: 328px;
}
#Username_ImageText {
	position:absolute;
	width:130px;
	height:55px;
	z-index:5;
	left: 319px;
	top: 208px;
}
#User_Frame {
	position:absolute;
	width:230px;
	height:46px;
	z-index:6;
	left: 441px;
	top: 216px;
}
#Username_Textbox {
	position:absolute;
	width:182px;
	height:23px;
	z-index:7;
	left: 455px;
	top: 228px;
}
--> 
</style>  

</head>
<body onload="document.form1.username.focus();">
<form id="form1" name="form1" method="post" action="">
  <div id="Department_Option">
    <select name="department" onkeypress="return handleEnter(this, event)">
      <option>Choose your Department. . . . . . </option>
      <option value="Accounting" <?php if($_POST['department'] == 'Accounting') echo "selected='selected'"; ?>>Accounting</option>
      <option value="Engineering" <?php if($_POST['department'] == 'Engineering') echo "selected='selected'"; ?>>Engineering</option>
      <option value="Finishing_Goods" <?php if($_POST['department'] == 'Finishing_Goods') echo "selected='selected'"; ?>>Finishing Goods</option>
      <option value="HRAD" <?php if($_POST['department'] == 'HRAD') echo "selected='selected'"; ?>>HRAD</option>
      <option value="MIS" <?php if($_POST['department'] == 'MIS') echo "selected='selected'"; ?>>MIS</option>
      <option value="Packaging_and_Design" <?php if($_POST['department'] == 'Packaging_and_Design') echo "selected='selected'"; ?>>Packaging and Design</option>
      <option value="Production" <?php if($_POST['department'] == 'Production') echo "selected='selected'"; ?>>Production</option>
      <option value="Purchasing_Logistic" <?php if($_POST['department'] == 'Purchasing_Logistic') echo "selected='selected'"; ?>>Purchasing and Logistics</option>
      <option value="QA_and_Technical" <?php if($_POST['department'] == 'QA_and_Technical') echo "selected='selected'"; ?>>QA and Technical</option>
      <option value="Supply_Chain" <?php if($_POST['department'] == 'Supply_Chain') echo "selected='selected'"; ?>>Supply Chain</option>
    </select>
  </div>
  <div id="Submit_Button">
    <input type="Submit" name="submit" value="Submit" id="submit" onclick="doSomething();"/>
  </div>
  <div id="Dept_Frame"><img src="layout_image/subframev02.png" width="229" height="50" /></div>
  <div id="Submit_Frame"><img src="layout_image/subframev02.png" width="80" height="46" /></div>

<div id="Username_ImageText"><img src="layout_image/userv01.png" width="131" height="62" /></div>
<div id="User_Frame"><img src="layout_image/subframev02.png" width="229" height="50" /></div>
<div id="Username_Textbox">
  <input name="username" type="text" size="30" onkeypress="return handleEnter(this, event)"/>
</div>
</form>
</body>
</html>

Krik

This is where the $SESSION [man]superglobal[/man] comes in handy when the user successfully logs in you set a value in the $SESSION super global. And if that value is not set they see the login page otherwise they see a different page its like having 2 home pages and what is displayed depends on what is stored in the $_SESSION super global.

I have a site that has 5 different home pages and what the user sees is dependent on a value that is stored in the $_SESSION super global.

newphpcoder

kingdm;10962753 wrote:
The text "Incorrect Username and Department" surely won't appear as on what you want, because the page is redirected to index.php and the echo you placed right after the header() well should I say left on that page.

If I were to print the string "Incorrect Username and Department", I'll have this else :
else { 
                $_SESSION['dummy'] = 1;
                header('location:index.php'); 
}
Then assuming this is my index.php
<?php
session_start();
if($_SESSION['dummy'] == 1) {
$text = "Incorrect Username and Department";
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml">
<?php echo $text; ?>
</html>

Good day!

I try the code you suggested and sad to say the Incorrect Username and Department was not still appear

newphpcoder

anoopmail;10962756 wrote:

 header('location:index.php?status=badusername');

nd in index.php

<?php
if($_GET['status'] && $_GET['status'] == 'badusername') {
$msg = "Incorrect Username and Department";
}
?>
<html>
<?php echo $msg; ?>  

. . .

Good day!

Thank you for the code you suggested, i try this code and the output is still the incorrect username and password wass not appear.

anoopmail

can u see index.php?status=badusername in the browser address bar?

newphpcoder

Krik;10962954 wrote:
This is where the $SESSION [man]superglobal[/man] comes in handy when the user successfully logs in you set a value in the $SESSION super global. And if that value is not set they see the login page otherwise they see a different page its like having 2 home pages and what is displayed depends on what is stored in the $_SESSION super global.

I have a site that has 5 different home pages and what the user sees is dependent on a value that is stored in the $_SESSION super global.

I'm not familiar about super global

newphpcoder

anoopmail;10963374 wrote:
can u see index.php?status=badusername in the browser address bar?

Krik

You are familiar with the $POST super global. The $SESSION super global is very similar except you can assign data to it, for the duration of the users session. If you are not familiar with it, that is why I provided the link to [man]superglobal[/man] in the php manual.

I should note, that for what your trying to do (based on this post and your other one) you really should learn how to work with sessions there are tons of tutorials out there and I would say find a good one and study it, you will not regret it.

NogDog

And again, please do not cross-post. Threads merged.

anoopmail

} elseif($row['Department']=='Supply_Chain') {
                header('location:Company.php');
            }
            else {
                header('location:index.php?status=badusername');
         }

this piece of code would redirect to index.php with a parameter in url if validation fails. Can u check the code inside this else block is getting executed?