php login dynamic URL can't display in IE

[Aebx]

I am brand new at this but here is my code.

<?php
error_reporting(0);

$username = $_POST['username'];
$password = $_POST['password'];

//Do not include https:// in the url.
$url = "www.example.com/Members/testresults_frameset.php?".$username;

$login = $username . ' : ' . $password . ' @ ';

if($username && $password) {
       header( 'Location:https//' . $login . $url );
}else{
       echo "Please provide a username and password. <a href=\"javascript:history.go(-1)\">Go back</a>.";
}
?>

[bradgrafelman]

Welcome to PHPBuilder! When posting PHP code, please use the board's [noparse]

..

[/noparse] bbcode tags (not the generic CODE tags) as they make your code much easier to read and analyze.

As for your issue.. you've shown us some code, but you haven't explained what's happening versus what you expected to happen.

One problem I notice is that you have a space before and after the colon as well as the '@' symbol in the URL; URL's can not contain any spaces.

[Aebx]

Brad, Thanks for the heads up. Here is the revised code:

<?php
error_reporting(0);

$username = $_POST['username'];
$password = $_POST['password'];

//Do not include https:// in the url.
$url = "/Members/testresults_frameset.php?".$username;

if($username && $password) {
       header('Location: https://'.$username.':'.$password.'@'.$url);
}else{
       echo "Please provide a username and password. <a href=\"javascript:history.go(-1)\">Go back</a>.";
}
?>

This is for an Apache directory login.
This code takes the username and password from a login page and inserts them into the URL.
The code works for Firefox and Chrome but when I try IE, I get a message saying IE cannot display the webpage.

[bradgrafelman]

Instead of using [man]header/man, replace it with a call to [man]var_dump/man and show us the output.

Also, do you have "Show friendly HTTP error messages" (Internet Options -> Advanced tab) disabled in IE? If not, uncheck that box and try browsing to this page again to see if you get any more information out of IE.

[Aebx]

Brad, I replaced the header function with var_dump().
I unchecked the "Show friendly HTTP error messages".

I get this response in all browsers when I submit the login info:

string(88) "Location: https://000000:[e-mail]/Members/testresults_frameset.php?000000"

000000 is the test username and mdva04 is the password.

[bradgrafelman]

It's quite possible that IE refuses to follow (or simply doesn't understand) a header redirect to a secure site that includes the username and password in the URI. It is Microsoft after all, y'know. :p