grandman

Hello, Are you saying that I should have a table in my DB something like user_folder, and as created add them to the table. Then use this to check the existence of a folder. DG

Hello, the 'IF' statement if (file_exists($filename)) { , is just ignored. Wondering have I written a re-direct script. What I want is for the member logging in, if already registered to be taken to their folder. <?php ob_start(); $Database = mysql_connect("localhost", "linkhome_admin", "mummother210"); mysql_select_db("linkhome_link2000"); $fields = mysql_query("SELECT * FROM users"); $Username = mysql_result($fields,0,1,"username"); $dirname = $Username; $filename = "onwards/controler/" . "$dirname"; //below not working if (file_exists($filename)) { //above not working $URL="http://www.linkhomes2000.co.uk/onwards/controler/ " . "$dirname" . "/index.php"; header ("Location: $URL"); } else { mkdir("$filename" . "$dirname", 0777); echo "welcome " . "$dirname" . "Your Area Is Being created."; } chown("$dirname", $linkhome); $handle = opendir("$dirname"); while($entry = readdir($handle)) if($entry != "." && $entry != "..") copy($index.php .$entry, "$dirname " .$index.php .$entry); ob_end_flush(); ?> DG

Hello, Thank you to all who replied, why did I do what I did. Is that called "concat" (don't know how to spell it now) the file. I really need to learn when to do so and when not... DG

Hello, I have a problem, how should this be written: $URL="http://www.mysite.com/on/cont/ " . <?php "$dirname" ?> . "/" . "index.php"; header ("Location: $URL"); DG

?php> function checkLogin ( $levels ) { // set session session_start (); global $db; $kt = split ( ' ', $levels ); if ( ! $_SESSION['logged_in'] ) { $access = FALSE; if ( isset ( $_COOKIE['cookie_id'] ) ) {//if we have a cookie $query = 'SELECT * FROM ' . DBPREFIX . 'users WHERE ID = ' . $db->qstr ( $_COOKIE['cookie_id'] ); if ( $db->RecordCount ( $query ) == 1 ) {//only one user can match this $row = $db->getRow ( $query ); //let's see if we pass the validation, if ( $_COOKIE['authenticate'] == md5 ( getIP () . $row->Password . $_SERVER['USER_AGENT'] ) ) { //we set the sessions $_SESSION['user_id'] = $row->ID; $_SESSION['logged_in'] = TRUE; //check the level access, if ( in_array ( get_level_access ( $_SESSION['user_id'] ), $kt ) ) { // $access = TRUE; } } } } } else { $access = FALSE; if ( in_array ( get_level_access ( $_SESSION['user_id'] ), $kt ) ) { $access = TRUE; } } if ( $access == FALSE ) { header ( "Location: " . REDIRECT_TO_LOGIN ); } } ?> this is the login: <?php require_once ( 'settings.php' ); if ( array_key_exists ( '_submit_check', $_POST ) ) { if ( $_POST['username'] != '' && $_POST['password'] != '' ) { $query = 'SELECT ID, Username, Active, Password FROM ' . DBPREFIX . 'users WHERE Username = ' . $db->qstr ( $_POST['username'] ) . ' AND Password = ' . $db->qstr ( md5 ( $_POST['password'] ) ); if ( $db->RecordCount ( $query ) == 1 ) { $row = $db->getRow ( $query ); if ( $row->Active == 1 ) { set_login_sessions ( $row->ID, $row->Password, ( $_POST['remember'] ) ? TRUE : FALSE ); header ( "Location: " . REDIRECT_AFTER_LOGIN ); } elseif ( $row->Active == 0 ) { $error = 'Your membership was not activated. Please open the email that we sent and click on the activation link.'; } elseif ( $row->Active == 2 ) { $error = 'You are suspended!'; } } else { $error = 'Login failed!'; } } else { $error = 'Please use both your username and password to access your account'; } } ?> I still can't get it to work, but I'm thinking it wont work, and I may need to change the above? If so that will be a real pain :-\ DG

Hello, This small script is activated when members login. First time creates new folder, otherwise navigates to members folder. My problem is the DB part is not consist enough in identifying the member login in. So have been trying to use SESSION, but can't get it to work. This is the script with the DB part still in place: <?php ob_start(); $Database = mysql_connect("localhost", "vars", "vars"); mysql_select_db("database"); $fields = mysql_query("SELECT * FROM users"); $Username = mysql_result($fields,0,"username"); $dirname = $Username; $filename = "on/cont/" . "$dirname"; if (file_exists($filename)) { header ( "Location: " . "$filename" . "$dirname"); } else { mkdir("on/cont/ " . "$dirname", 0777); echo "welcome " . "$dirname" . "Your Area Is Being created."; } ob_end_flush(); This was suggested the last time I asked for help but will not work: <?php session_start(); if (isset($_SESSION['username'])) $user = $_SESSION['username']; else $user = ""; print ($user); ?> Print Command purely for test purposes. Finally it should be made clear that login is in dir(a) while this is in dir(d), while directory structure is simply: a,b,c,d,. Any help with this is greatly appreciated, as I'm not moving at all, (haven't for two days, really stuck). DG

Hello, I'm learning php, I use: 1) Sitepoint Build your own database driven website THats what I said above too Hi, It's a good book, but I wish they would go a little deeper in to the subject matter. The joke DB is not quite the best choice, it lacks some of the finer points you need in real life. At present am really struggling with session question, which the book hasn't answered, and the web is not making it very clear either.

Hello, I'm learning php, I use: 1) Sitepoint Build your own database driven website 2) download and dissect scripts from the web. This part is important, but never use any scripts without modifying them. This helps in two ways a) Helps understand the script b) Advances you own php knowledge DG

I can't disagree more, I wish when I first started to learn php, and asked for help on a forum someone had answered that way. It would have helped me tremendously. Even though I'm still learning, I use books, and code downloaded (which I dissect). Every forum seems to answer a question with a question, why can't we just tell someone (at least the general direction) of finding the answer. DG

Hello, I've tried htaccess, it never works for me. I wanted to stop someone copying the address from the browser, then pasting it in a new window. all htaccess did was stop everything working. I think the answer lay in utilizing other functions offered by php. I use require once, move and delete file. the correct use of the above with a correctly designed login script stops direct access, and will make it difficult, to access the file. I think that it depends on what your looking to protect, if it's that important then even a 128bit encryption wont stop a very determined hacker. DG

Am I misunderstanding this totally? This is the script I was using: <?php ob_start(); $Database = mysql_connect("localhost", "vars", "vars"); mysql_select_db("vars"); $fields = mysql_query("SELECT * FROM users"); $Username = mysql_result($fields,0,"username"); $dirname = $Username; $filename = "on/cont/" . "$dirname"; if (file_exists($filename)) { header ( "Location: " . "$filename" . "$dirname"); } else { mkdir("on/cont/ " . "$dirname", 0777); echo "welcome " . "$dirname" . "Your Area Is Being created."; } ob_end_flush(); ?> What I'm trying to do is replace the DB input with a SESSION Variable, as I need to make sure I have the right user. This is run when the user logs-in. So if I run the code snippet you put up should it print the user name I'm using? DG

Hell, I have a problem with the SESSION FUNCTION. I'm trying to pass a SESSION Variable (username) from the login file located in directory "A" to a file located in directory "E", given a directory structure: A,B,C,D,E. I can't find how to check this, I've d tried print command but it wont work, this is a small snippet from the start of the script: <?php if(!session_id()) session_start(); if (session_is_registered); $user = ($_SESSION['username']); print ($user); ?> Not sure if this is correct, never used session before. This is for my sites members area, I had used a DB access, but really need to make sure I have the log-on member, so I am trying to use session. DG

hello, this looks good for tuition in creating a login script: http://www.roscripts.com/PHP_login_script-143.html DG

Hello, Tried My FTP Client and that tells me the owner in nobody? It did allow me to delete it though. will have to change my mkdir script, can anyone tell me were I put chowner in my script, before mkdir or after this function has been executed. DG

hello, I'm like you just starting php, I find the best two ways of learning are: A Book, I use "Sitepoint" Build your Own Database Driven Website. Then Down load scripts and dissect them. I used this as my module for a members area script: http://www.dwalker.co.uk/phpautomembersarea/ It lacks a few of the finer points, but should point you (I think) in the right direction. As for your own problem, I don't think you want that on every page, it look like a redirect script, and that means there are only two pages you can go to. that should be called from the login page, then try something like: <?php if ( $_SESSION['logged_in'] ): ?> PAGE CONTENT HERE <?php endif; ?> The SESSIONS FUNCTION this may ensure that only logged in visitors will see the content on the page. If not exactly this, something like this.... DG