Login Scripting

[Brad Farrell]

Hi All

Definitely a newbie with PHP, though I have messed with it a bit. I could
use some guidance here as I have spent the better part of 3 days walking the
net looking for an example.

Trying to accomplish:

When the user goes to the main page, index.html, they can enter a
username/password combo to go beyond. When the login button is pressed, the
script, login.php, is run to validate their entry and then send them along
to the first secure page, welcome.php. At the same time, if they just type
welcome.php in the address line, I would like them to be bounced back to the
index.html screen to do the login thing.

I've tried the header function, but keep getting errors about headers
already being sent. Research on this has led me to the session_registe r and
session_cache_l imiter, but my main problem is that the header function seems
to be able to be used only once in the particular session. If I shut down
IE and start it up again, things work.

Any help out there or any reference links that may help to clear up my
misunderstandin g?

Thanks.

Brad

[Geoff Berrow]

I noticed that Message-ID: <L9yjd.144164$P l.30993@pd7tw1n o> from Brad
Farrell contained the following:

I've tried the header function, but keep getting errors about headers
already being sent. Research on this has led me to the session_registe r and
session_cache_ limiter, but my main problem is that the header function seems
to be able to be used only once in the particular session. If I shut down
IE and start it up again, things work.

At the beginning of each page to be sent to a login page

<?php
session_start() ;
if($_SESSION['logged_in']==""){
header("Locatio n: login.php");
exit;
}

Login.php
(This code is fine for one or two discrete username password
combinations. For more, you will be better off using a database)

<?php
session_start() ;
$_SESSION['logged_in']="";
$userpass=array ("user1-pass1","user2-pass2","usern-passn");
$input=strtolow er($_POST['username'])."-".strtolower($_ POST['password']);

if(in_array($in put,$userpass)) {
$_SESSION['logged_in']=1;
}

then some data entry, error messages and so on

--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/

[Michael Fesser]

.oO(Geoff Berrow)

header("Locati on: login.php");

The Location-header requires an absolute URL.

Micha

[Brad Farrell]

Thanks. That did the trick. I think I had some other issues with the
header function, but it now seems to be working just fine.

Brad
"Geoff Berrow" <bl******@ckdog .co.uk> wrote in message
news:e7******** *************** *********@4ax.c om...

I noticed that Message-ID: <L9yjd.144164$P l.30993@pd7tw1n o> from Brad
Farrell contained the following:

I've tried the header function, but keep getting errors about headers
already being sent. Research on this has led me to the session_registe r andsession_cache_ limiter, but my main problem is that the header function seemsto be able to be used only once in the particular session. If I shut downIE and start it up again, things work.

At the beginning of each page to be sent to a login page

<?php
session_start() ;
if($_SESSION['logged_in']==""){
header("Locatio n: login.php");
exit;
}

Login.php
(This code is fine for one or two discrete username password
combinations. For more, you will be better off using a database)

<?php
session_start() ;
$_SESSION['logged_in']="";
$userpass=array ("user1-pass1","user2-pass2","usern-passn");
$input=strtolow er($_POST['username'])."-".strtolower($_ POST['password']);

if(in_array($in put,$userpass)) {
$_SESSION['logged_in']=1;
}

then some data entry, error messages and so on

--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/

[Geoff Berrow]

I noticed that Message-ID: <bc************ *************** *****@4ax.com>
from Michael Fesser contained the following:

.oO(Geoff Berrow)

header("Locat ion: login.php");

The Location-header requires an absolute URL.

It's always worked for me. What clients do not accept this?
--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/

[Tony Marston]

The error message means that before you issue header('locatio n: login.php');
you have already written something out. Look for any previous echo or print
statements, or even a blank line somewhere.

--
Tony Marston

http://www.tonymarston.net

"Brad Farrell" <br**********@b revell.com> wrote in message
news:L9yjd.1441 64$Pl.30993@pd7 tw1no...

Hi All

Definitely a newbie with PHP, though I have messed with it a bit. I could
use some guidance here as I have spent the better part of 3 days walking
the
net looking for an example.

Trying to accomplish:

When the user goes to the main page, index.html, they can enter a
username/password combo to go beyond. When the login button is pressed,
the
script, login.php, is run to validate their entry and then send them along
to the first secure page, welcome.php. At the same time, if they just
type
welcome.php in the address line, I would like them to be bounced back to
the
index.html screen to do the login thing.

I've tried the header function, but keep getting errors about headers
already being sent. Research on this has led me to the session_registe r
and
session_cache_l imiter, but my main problem is that the header function
seems
to be able to be used only once in the particular session. If I shut down
IE and start it up again, things work.

Any help out there or any reference links that may help to clear up my
misunderstandin g?

Thanks.

Brad

[Michael Fesser]

.oO(Geoff Berrow)

I noticed that Message-ID: <bc************ *************** *****@4ax.com>
from Michael Fesser contained the following:

The Location-header requires an absolute URL.

It's always worked for me. What clients do not accept this?

Doesn't matter, the full URL is required by the HTTP specification.

Micha