login script question in a PHP-CGI environment

[½Viking½]

The server that the script will run on has the following settings:

PHP Ver: 4.1.2
Server API: CGI
Register Globals: ON
Session Support: ON

I want to use sessions to store the information necessary to check to
see if the user is authenticated prior to each request the user makes.

I do not have access to modify any of the settings in the php.ini file
due to fact that this is a shared web hosting server.

Is there anything I need to be aware of that is different due to the
fact that PHP is running as a CGI ? I am familiar with the process
when PHP is running as a server module, but not familiar with PHP
running as a CGI.

Basically looking for guidance on the logic, I can write the code.

Thanks in advance

Viking

[Erwin Moller]

Viking wrote:

The server that the script will run on has the following settings:

PHP Ver: 4.1.2
Server API: CGI
Register Globals: ON
Session Support: ON

I want to use sessions to store the information necessary to check to
see if the user is authenticated prior to each request the user makes.

I do not have access to modify any of the settings in the php.ini file
due to fact that this is a shared web hosting server.

Is there anything I need to be aware of that is different due to the
fact that PHP is running as a CGI ? I am familiar with the process
when PHP is running as a server module, but not familiar with PHP
running as a CGI.

Basically looking for guidance on the logic, I can write the code.

Thanks in advance

Viking

Hi Viking,

I am not sure I understand your problem.
If you want to use session to check if the user is authenticted to see
certain pages, why not include some script above these pages that does
excactly that??
something like this.
checkUserIsAuthenticated.inc
<?
if ($_SESSION["isAdmin"] == "Y") {
// okay, continue.
} else {
echo "You are not authenticated!! Go away!";
exit 0;
}
?>

just start every page for 'admin' with that include.

This approach has nothing to do with CGI or ISAPI or whatever install you
did. It is just plain PHP and Sessions.

But maybe I am missing your point completely. :-/

Regards,
Erwin Moller

[½Viking½]

You understood correctly, I just wanted to know if PHP running as a
CGI needed to be treated differently in regards to sessions.

Thanks :)

Viking
On Tue, 10 Feb 2004 09:38:01 +0100, Erwin Moller
<si******************************************@spam yourself.com> wrote:

Hi Viking,

I am not sure I understand your problem.
If you want to use session to check if the user is authenticted to see
certain pages, why not include some script above these pages that does
excactly that??
something like this.
checkUserIsAuthenticated.inc
<?
if ($_SESSION["isAdmin"] == "Y") {
// okay, continue.
} else {
echo "You are not authenticated!! Go away!";
exit 0;
}
?>

just start every page for 'admin' with that include.

This approach has nothing to do with CGI or ISAPI or whatever install you
did. It is just plain PHP and Sessions.

But maybe I am missing your point completely. :-/

Regards,
Erwin Moller