Don't do it this way. If register globals is turned on, visitors can simply
go to one of your "password protected" pages, add "?permission=1" to the URI
and they will be allowed in.
- Kevin
"WindAndWaves" <access@ngaru.com> wrote in message
news:l5pKd.12573$mo2.966995@news.xtra.co.nz...[color=blue]
>
> "Lou" <louise@msc-ltd.co.uk> wrote in message
> news:35f5cc5f.0501280243.42d7497c@posting.google.c om...[color=green]
>> Please can someone put me out my misery!
>> Im trying to find a multiple user/password protection script that will
>> redirect the specific user to a specific directory.[/color]
> [...][color=green]
>> L[/color]
>
> make a link to a page call login.php?ref=X.php
>
> where X.php is the referring page
>
> then save the code below as login.php
>
> It works for me..., but I am only a beginner.
>
>
> <?php
>
> $front = '<!--start-->'; //put the start of your html file here....
>
> $end = '<!---end-->'; //put the end your html file here
> ?>
> <?php
> if ($HTTP_POST_VARS["username"]=="") {
> echo $front;
> ?>
> <H1>Login to myurl.com</H1>
> Please enter your details below:<BR>
> <FORM METHOD="post" ACTION="login.php?ref=<?php echo $ref; ?>"
> ID="frm">
> <LABEL CLASS="mul">Username: <INPUT TYPE="text" NAME="username"
> SIZE="20" ID="username"></LABEL>
> <LABEL CLASS="mul">Password: <INPUT TYPE="password" NAME="password"
> SIZE="15" ID="password"></LABEL><BR><BR>
> <DIV STYLE="text-align: center;">
> <INPUT TYPE="Submit" VALUE="log in" ID="submit" NAME="submit"
> CLASS="submit">
> </FORM>
> <?php echo $end; ?>
> <?php
> }
> else{
> // __________________________________________________ _____ clean out
> previous entries
> session_register("permission");
> session_register("username");
>
> $username=$HTTP_POST_VARS["username"];
> $password=$HTTP_POST_VARS["password"];
> $permission = 0;
> session_start();
> if ($username=="login" AND $password=="password"){ $permission = 1;}
> if ($username=="secondlogin" AND $password=="masterpassword"){
> $permission = 2;}
> //etc...
> $username=$HTTP_POST_VARS["username"];
> session_register("permission");
> session_register("username");
> if ($permission > 0){
> session_start();
> echo $front;
> ?>
> <H1>welcome <?php echo $username; ?></H1>
>
> <?php
> if (strpos($ref, '.php') === false) {
> $ref .= '.php?';
> }
> echo 'Congratulations, login correct. <A
> HREF="'.$ref.'&PHPSESSID='.session_id().'">Ple ase continue</A>.';
> echo $end;
> ?>
> <?php
> }
> else{
> ?>
> <?php echo $front; ?>
> <H1>please try again <?php echo $username; ?></H1>
> Sorry: login NOT correct. <A HREF="login.php<?php echo
> '?ref='.$ref; ?>">Please try again</A>.
> <?php echo $end; ?>
> <?php
> }
> ?>
> <?php
> }
> ?>
>
>
>
> Then, in other pages, that you want to password protect, you put.
>
> <?php
> session_start();
> if ($permission < 1) {
> echo 'please <A HREF="login.php?ref=mypage.php">login first</A>';
> }
> else {
> [rest of the page.....]
> }
>
> Note that for this way you do need to use sessions... how they work, I
> have no idea, but they seem to work for me ... lol
>
> - Nicolaas
>
>[/color]
