Session Registration with Username?

[alfandango]

I'm using this script to ensure users are logged in to view the page.

<?php
session_start();
if(!session_is_registered(username)){
header("location:client.htm");
}
?>

It works fine but is there any way I can restrict this to just one (or pultiple) username(s)?

EDIT - Also, is it possible to restrict the access/content of a certain folder to particular users?

[Markus]

@alfandango
2. I'll answer, or try to answer, your second question first. If you're looking to restrict a folder, you'd want to look into using .htaccess files, I think. There may be a better way.

1. The session_register() and functions like it rely on register_globals() to be enabled. Don't use them; stick to the $_SESSION array.

You can check the contents of the session by $_SESSION['username'] and then compare it to a list of allowed usernames - this usually comes from a database.

Thanks,
Markus.

[alfandango]

Not sure I fully understand (sorry I'm new to PHP so may be a little slow off the mark)...

Do you mean something like this?

<?php
session_start();
$_SESSION['username'] = $username;
 
if (!$username==admin)
    {
        header("location:client.htm");
    }
?>

It may bad code, but it restrics access to the page, but also to the user "admin" which is supposed to be the only one WITH access :(

Essentially what I'm trying to do is:
1) load page
2) check logged in user
3) if "admin" allow access to page
4) if not "admin" redirect back to client.htm

Regarding the other point, I'll look into htaccess.

Cheers dude!

[Markus]

@alfandango
Yeh, you've got the jist of it.

But admin should be in quotes -> "admin".

Let's have a look at your log in page, to see if there's a problem there. (Use [code] tags).