473,789 Members | 2,032 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

the user must not access the pages

hi,

when the user clicks the logout.php the session variables are
destroying. my doubt is when the user clicking back, again they are
entering into the pages. how to check whether session variables exist
or not. if the sessions variables are not exist i use header to go
login.html page. if yes the user can enter the pages.......in every
page i want to check whether session variables exist or not......
In every page for example login.php page(in login.html form
action=login.ph p) how to check whether session variables exist or not?


if suppose he logins using login.html page(action=log in.php). if
username and password are correct he enters into login.php otherwise
he stay at login.html only.

now my doubt is how can we check for session variables whether are
they exists or not in login.php. obviously the sessions will not be
started before login.php. so every time he redirected to the
login.html page only....

we create the session variables when the user successfully enters into
login.php only.

thankyou in advance.....
Dec 12 '07 #1
1 1570
On Wed, 12 Dec 2007 11:56:42 +0100, chowdary <ph*********@gm ail.comwrote:
hi,

when the user clicks the logout.php the session variables are
destroying. my doubt is when the user clicking back, again they are
entering into the pages.
Well, they could see their cache, they shouldn't see the pages on a new
request.
how to check whether session variables exist
or not. if the sessions variables are not exist i use header to go
login.html page. if yes the user can enter the pages.......in every
page i want to check whether session variables exist or not......
Which is you answer: check wether the session is valid _on_every_page_ . I
can't quite grasp your current problem with that..
--
Rik Wasmus
Dec 12 '07 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

18
2478
by: | last post by:
Please help. After a number of wrong turns and experiments I need advice on login management system to secure our web pages without inconveniencing our visitors or our internal staff. What I need: A system whereby the user only has to register ONCE and he will have automatic entry to ANY page without havinto to RE-LOGIN even if he comes in
8
1663
by: joe | last post by:
Some time ago I set up an ASP application that used a login page which checked a username and password against a database to determine a users authorization to access certain pages on the site. This was done by setting a session variable within the application if the user was authorized and using code one each page for which protection was required to check for the status of the session variable. Now I am aware of the various techniques...
10
2507
by: George G. | last post by:
Hi there, I am busy writing a new asp.net application and I am reusing some of my existing asp functions and methods in a user control. I need access to session, request and response in some of the functions and I can't find out how to do it. Here is an example of what I do and I get the following Cannot refer to an instance member of a class from within a shared method or shared member initializer without an explicit instance of the...
1
2160
by: Barbara Alderton | last post by:
I have the following scenario: I have a user control that contains a registered menu control. The menu and other information on the user control is specific to the user accessing the site. This user control is used on many pages. In order to create this control, I need to access information in the Active Directory to create both the menu and other info displayed on the control. This access takes some time and I wanted to cache this...
19
2546
by: Siobhan | last post by:
Hi What is the recommended way to store a user's database credentials across the pages of a web application so that each time the database is accessed the system doesn't have to ask them for their username and password again We have previously stored these in a session variable (encrypted) and retrieved from their - but are worried about the impact on performance if the number of users increases. Had thought about cookies but worried...
2
1202
by: Stewart Rogers | last post by:
Hi all, I have been working on an ASP.NET application that is a kind of wizard ( a list of sequential pages ). We built that application for the CLIENT-A and it worked fine. After six months CLIENT-B came along and and requested the same application but with little bit different requirements (both in terms of the front-end and back-end processing), so we had to create a new application for that client. Now came CLIENT-C !!!!!! I am...
6
3090
by: Bob Sanderson | last post by:
I have created a MySQL database for my company which is accessed by PHP pages. I would like to permit some users to edit the records but allow others read-only access. However, I don't want to have to enter a password every time I want to edit a record. Is there a way to use our network login to do this? If not, what is the easiest way to accomplish this? The database is running on our server and is not accessible via the net. Any help...
4
4156
by: Peppie | last post by:
I have a (self proclaimed ) very nice and well designed database that organizes my clients, contacts, projects and documents sent to my clients (including a report generator in MS Word). At this moment, the database is used by appr. 100 users in two countries. So far, no problems, but I have the feeling that I should take this thing a bit further. I would like to create a user interface (a copy of the current user interface) that runs...
2
1552
by: spncc | last post by:
i'm making Form authenticate page to let the user first logon before using the application. However, like most security manner, the new user is needed to first logon and forced to change password before using the application. My problem is - When the user passed the authentication at logon page, we need to redirect them to change thier password. but anyway the user can type at the address bar to surf other pages on the application. What...
3
2069
by: kcddoorman | last post by:
Environment: Windows 2000 Server IIS 5.0 Access 2003 IIS is set up for basic authentication. This means I can set rights for logged in users using NTFS file permissions. This all works well for simple protection of a few pages. I have several web pages that allow employees from different departments to enter order statuses, deliveries, schedules, etc. The web pages were developed using Access's data access pages. I've done very little with...
0
9499
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10374
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
10121
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9969
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
7519
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6750
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5404
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
5539
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
3
2898
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.