Can someone please help me with this?
I'm using a third party PHP generated to build a login script, but I'm having trouble editing their code. I want the form to send the user's key (KT_ReporterId) in a hidden form field to the next page, but it doesn't work by standard methods. I think it's because I don't understand PHP well enough yet. I get some error on the next page about 'header already sent.' Here's the code:
<?php
// Start the session
session_start();
// Validate request to log in to this site.
$KT_LoginAction = $PHP_SELF;
if ($QUERY_STRING!="") $KT_LoginAction .= "?".$QUERY_STRING;
if (isset($username)) {
$KT_valUsername=$username;
$KT_fldUserAuthorization="";
$KT_redirectLoginSuccess="report.php";
$KT_redirectLoginFailed="index2.php";
$KT_rsUser_Source="SELECT strUsername, strPassword ";
if ($KT_fldUserAuthorization != "") $KT_rsUser_Source .= "," . $KT_fldUserAuthorization;
$KT_rsUser_Source .= " FROM tblreporter WHERE strUsername='" . $KT_valUsername . "' AND strPassword='" . $password . "'";
$KT_rsUser=$reaction->Execute($KT_rsUser_Source) or DIE($reaction->ErrorMsg());
if (!$KT_rsUser->EOF) {
// username and password match - this is a valid user
$KT_Username=$KT_valUsername;
session_register("KT_Username");
if ($KT_fldUserAuthorization != "") {
$KT_UserAuthorization=$KT_rsUser->Fields($KT_fldUserAuthorization);
} else {
$KT_UserAuthorization="";
}
session_register("KT_UserAuthorization");
if (isset($accessdenied) && false) {
$KT_redirectLoginSuccess = $accessdenied;
}
$KT_rsUser->Close();
session_register("KT_login_failed");
$KT_login_failed = false;
header ("Location: $KT_redirectLoginSuccess");
exit;
}
$KT_rsUser->Close();
session_register("KT_login_failed");
$KT_login_failed = true;
header ("Location: $KT_redirectLoginFailed");
exit;
}
?><?php
// Start the session
$KT_ReporterId = "";
session_start();
// Validate request to log in to this site.
$KT_LoginAction = $PHP_SELF;
if ($QUERY_STRING!="") $KT_LoginAction .= "?".$QUERY_STRING;
if (isset($username)) {
$KT_valUsername=$username;
$KT_fldUserAuthorization="";
$KT_redirectLoginSuccess="report.php";
$KT_redirectLoginFailed="index2.php";
$KT_rsUser_Source="SELECT strUsername, strPassword ";
if ($KT_fldUserAuthorization != "") $KT_rsUser_Source .= "," . $KT_fldUserAuthorization;
$KT_rsUser_Source .= " FROM tblreporter WHERE strUsername='" . $KT_valUsername . "' AND strPassword='" . $password . "'";
$KT_rsUser=$reaction->Execute($KT_rsUser_Source) or DIE($reaction->ErrorMsg());
$KT_idSQL = "SELECT intReporterId FROM tblreporter WHERE strUsername='" . $KT_valUsername . "'";
$KT_ReporterId = $reaction->Execute($KT_idSQL) or DIE($reaction->ErrorMsg());
session_register("KT_ReporterId");
.
.
$KT_rsUser->Close();
session_register("KT_login_failed");
$KT_login_failed = false;
header ("Location: $KT_redirectLoginSuccess");
exit;
.
.
.
.
<form name="login" method="post" action="<?php echo $KT_LoginAction?>">
<p>Username:
<input type="text" name="username" size="20" maxlength="20">
</p>
<p> Password:
<input type="password" name="password" size="20" maxlength="20">
</p
>
<p>
<input type=HIDDEN name=ReporterId value="<?php echo $KT_ReporterId; ?>">
<input type="submit" name="Submit" value="Login!">
.
.
