Implemeting user login

webrajesh

I am going to use the SECURITY CODE as found in this article below :

http://www.phpbuilder.com/columns/tim20000505.php3

now that, I would like to know how to protect my web existing webpages. i.e A user can view the page only if he is registered, else redirected to the login page.

Plz explain

Anon

You have to use session variables...Like say session_id = 1 if user is logged in session_id = 0 if not logged in. In each subsequent page you have a check to see what session_id is equal to if it is 1 they can get to the page if it is zero redirect them to your login page.

Anon

session_start();
// Check to see if user is valid
if(empty($SESS_bValidUser)||($SESS_bValidUser == FALSE )){
header("Location: Login.php" );
exit;
}

Anon

You'll have to dump cookie on a client's computer with some value.

When the login you
setcookie("login", "yes");

When the come to the pages you check the cookie
if($login!="yes")
display_login();
else
display_page();

This is just a simple example. Hope it'll get you started,

webrajesh

Hi,

Registration, Login, Logout is working fine now. I will come to protecting pages after this onw.

LOSTPASS.PHP - this is not working. I get the following error.

Warning: Failed opening '/usr/local/plesk/apache/vhosts/maduraibazaar.com/httpdocs/include/utils.php' for inclusion (include_path='.:/usr/local/plesk/apache/lib/php') in /usr/local/plesk/apache/vhosts/maduraibazaar.com/httpdocs/test/lostpass.php on line 5

Warning: Cannot add header information - headers already sent by (output started at /usr/local/plesk/apache/vhosts/maduraibazaar.com/httpdocs/test/lostpass.php:5) in /usr/local/plesk/apache/vhosts/maduraibazaar.com/httpdocs/include/user.php on line 73

Warning: Cannot add header information - headers already sent by (output started at /usr/local/plesk/apache/vhosts/maduraibazaar.com/httpdocs/test/lostpass.php:5) in /usr/local/plesk/apache/vhosts/maduraibazaar.com/httpdocs/include/user.php on line 74

This is the URL :
http://www.maduraibazaar.com/test/lostpass.php

Also once the user successfully logs in, he should be redirected to apage say (index2.php) where it should show the user name at the top (who has logged in) and a logout button. how to do this.

Awaiting reply.

Rgds

Anon

Well,

Check php.ini file and make sure that you specified correct path form include() function.

As far as headers errors -> you probably have problems with cookies.

If you have

echo "$login_form";
setcookie("cookie", "cookie");

It will give you an error. That headers already sent. Cookie headers have to come before Content-type: text/html headers.

Make sure that setcookie() is invoked before you send even a single characters to the output.

Another way to solve it is to use ob_start() and ob_flush_end()

Anon

Hi,

Where to find the php.ini file..?

Sorry i dont have any idea on Cookies..would be happy if u let me know abt any tutorial.

Awaiting reply.

Anon

First things first,

http://download.php.net/manual/en/ -> study it. Manual is your friend. They cover cookies and they cover sessions.

php.ini is located in different places depending on the OS. Just do file search for php.ini. Initially php.ini comes as php.ini-dist.

Sounds like you are newbie when it comes to a lot of things. I suggest you read Julie Melonie's PHP fast and Easy. It is a terrific book, for individuals who are new to php.

And

while($knowledge==NULL)
study_hard();