Jump to content

DeanWhitehouse

Members
  • Posts

    2,527
  • Joined

  • Last visited

Posts posted by DeanWhitehouse

  1. i have written a remember me feature into my script, but i don't think it is working ( when i log out, it doesn't have my username already in the box) but i don't no, becuase i close the page and re-open it and i'm still logged in but that might be my session not closing?

     

    this is my code

    {
    require_once 'db_connect.php';
    
    if ($_SESSION['is_valid'] == false)
    {
    	if (isset($_POST['login']))
    	{
    
    	$user_name = $_POST["user_name"];        
    	$user_password = $_POST["user_password"]; 
    	$cookiename = forumcookie;   
    	$verify_username = strlen($user_name);
    	$verify_pass = strlen($user_password);
    		if ($verify_pass > 0 && $verify_username > 0)
    		{
    		$salt = substr($user_password, 0, 2);
    		$userPswd = crypt($user_password, $salt);
    		$sql = "SELECT * FROM `$user` WHERE user_name='$user_name' AND user_password='$userPswd' LIMIT 1;";
    		$result = mysql_query($sql);
    			if (mysql_num_rows($result) == 1)
    			{
    			$row = mysql_fetch_assoc($result);
    			$user_level = $row['userlevel'];
    				if ($user_level == 1) 
    				{
    				$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = 	'$_GET[p]'"));
    
    				$userright = array($login_check['user_name'], $login_check['userlevel']);
    				$s_userpass = serialize($userpass);
    				$_SESSION['username'] = $row['user_name'];
    				$_SESSION['user_password'] = $row['user_password'];
    				$_SESSION['user_level'] = $row['userlevel'];
    				$_SESSION['user_id'] = $row['user_id'];
    				header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    				$_SESSION['is_valid'] = true;
    					 if(isset($_POST['remember']))
    					 {
        					  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        					  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       			}
    			} 
    		elseif ($user_level == 2){    
    			$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = '$_GET[p]'"));
    
    			$userright = array($login_check['user_name'], $login_check['userlevel']);
    		$s_userpass = serialize($userpass);
    	$_SESSION['username'] = $row['user_name'];
    	$_SESSION['user_password'] = $row['user_password'];
    	$_SESSION['user_level'] = $row['userlevel'];
    	$_SESSION['user_id'] = $row['user_id'];
    	header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    	$_SESSION['is_valid'] = true; //change the session variable name to what you want, just remember it for all files
    	 if(isset($_POST['remember'])){
        	  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        	  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       		}
    	}
    }
    else{
    	echo "Login failed. Username and Password did not match database entries.";    
    }
    }
    
    else
    {
    echo "Form was not completed. Please go back and make sure that the form was fully completed.";    
    }
    }
    $server = str_replace("?logout=true","",$_SERVER['PHP_SELF']);
    ?> 
    
    <html>
    <table bgcolor='#999999' align='right'><form action="<?php echo $server ?>" method='POST'>
    <tr><td>Username: </td><td><input type='text' name='user_name' /><br /></td></tr>
    <tr><td>Password:</td><td> <input type='password' name='user_password' /><br /></td></tr>
    <tr><td><input type="hidden" name="login" value="true"><input type="submit" value="Submit"></td></tr>
    <tr><td><input type="checkbox" value="1" name="remember"> Remember Me </td></tr><tr><td><a href="register.php">[Register]</a></td></tr><tr><td><a href="forgot_password.php">[Forgot Password?]</a></td></tr></table>
    </form>
    </html>
    
    <?php 
    mysql_close();
    }
    else
    {
    header("Location:http://".$_SERVER[HTTP_HOST]);
    }
    }
    ?>
    

  2. i have a remember me checkbox (i don't think it works) and a hide email checkbox , how can i store whether its checked or not,(not in the database but on the actual box)

    so if a user ticks hide email, when they view there settings again the box is still ticked, bot unticked.

     

    Here are both codes the hide email and the remember me code.

    <?php
    require_once 'db_connect.php';
    require_once 'nav_bar.php';
    require_once 'logged_in.php';
    
    if ($_SESSION['is_valid'] == true){
    $user_id = $_SESSION['user_id'];
    $sql = "SELECT * FROM $user WHERE `user_id`='{$user_id}' LIMIT 0,1;";
    $result = mysql_query($sql);
    $row = mysql_fetch_assoc($result);
    $email = $row['user_email'];
    $show_email = $row['show_email'];
    
    $user_password = $_POST["user_password"];		
    $user_password2 = $_POST["user_password2"];
    $user_email = $_POST["user_email"];		
    $user_email2 = $_POST["user_email2"];
    
    if(isset($_POST['update']))
    {
    if($user_email)
    {
    	if($user_email == $user_email2)
    	{
    	mysql_query("UPDATE $user 
    SET user_email = '$user_email' 
    WHERE user_id = '$user_id'")or die('Could not update email: ' . mysql_error());
    	}
    	else
    	{
    	echo "Email Addresses do not match";
    	}
    }
    if($user_password)
    {
    	if($user_password == $user_password2)
    	{
    	mysql_query("UPDATE $user 
    SET user_password = '$user_password' 
    WHERE user_id = '$user_id'")or die('Could not change password: ' . mysql_error());
    	}
    	else
    	{
    	echo "Passwords do not match";
    	}
    }
    if((isset($_POST['hideemail'])) && ($_POST['hideemail'] == 0))
       {
       mysql_query("UPDATE $user
       SET show_email = '0'
       WHERE user_id = '$user_id'")or die('Could not change settings: ' . mysql_error());
       echo "Settings Saved";
            }
       elseif((isset($_POST['hideemail'])) && ($_POST['hideemail'] == 1))
       {
       mysql_query("UPDATE $user
       SET show_email = '1'
       WHERE user_id = '$user_id'")or die('Could not change settings: ' . mysql_error());
            echo "Settings Saved";
       }
    }
    
    ?>
    <html>
    <table bgcolor='#999999' align='center' width="400px">
    <form action='<?php $_SERVER['PHP_SELF']; ?>' method='POST'>
    <tr><td width="10px">Maximum Length<br /> 20 characters.</td></tr>
    <tr><td width="10px">E-mail Address:</td> <td><input type='text' name='user_email' value="<?php echo "$email"; ?>"  /><br /></td></tr>
    <tr><td width="10px">Confirm E-mail Address: </td><td><input type='text' name='user_email2' value="<?php echo "$email"; ?>" /><br /></td></tr>
    <tr><td width="10px">Maximum Length<br /> 30 characters.</td></tr>
    <tr><td width="10px">New Password:</td><td> <input type='password' name='user_password' maxlength="30" /><br /></td></tr>
    <tr><td width="10px">Confirm Password:</td><td> <input type='password' name='user_password2' maxlength="30" /><br /></td></tr>
    <tr><td>Email Status:</td></tr><td><tr><?php if ($show_email == 1)
    { 
    echo "Visible";
    }
    elseif ($show_email == 0)
    {
    echo "Hidden";
    } ?></td></tr>
    <tr><td width="10px">Hide Email</td><td width="10px">Yes<input type="radio" value="0"  name="hideemail"/> No<input type="radio" value="1"  name="hideemail"/> </td></tr>
    <tr><td><input type='submit' value='Save Changes' name='update' /></td>
    </form>
    </table>
    </html>
    <?php 
    }
    else
    {
    echo "Please login to view this page.";
    }
    ?>

     

    <?php
    if (isset($_GET['logout']))
    {
    setcookie("cookname", $_SESSION['username'], time() - 3600, "/");
    setcookie("cookpass", $_SESSION['user_password'], time() - 3600, "/");
    session_unset();
    session_destroy();
    }
    if ($_SESSION['is_valid'] == true)
    {
    if ($_SESSION['user_level'] == 2)
    {
    	?>
    	<table class='logged_in'><tr><td>
    	<p>Welcome, <br><?php echo $_SESSION['username']; ?>
    	<br><a href='user_profile.php?id=<?php echo $_SESSION['user_id']; ?>'>User Profile</a><br>
    	<a href='user_setting.php'>Settings</a><br>
    	<a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />
    	</td></tr><tr><td>Logged In</td></tr></table></p>
    	<?php 
    }
    
    if ($_SESSION['user_level'] == 1)
    {
    	?>
    	<table class='logged_in'><tr><td>
    	<p>Welcome, <?php echo $_SESSION['username']; ?>
    	<br><a href='user_profile.php?id=<?php echo $_SESSION['user_id']; ?>'>User Profile</a><br>	
    	<a href='user_setting.php'>Settings</a><br>
    	<a href='admin_centre.php'>Admin Area</a><br>
    	<a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />
    	</td></tr><tr><td>Logged In</td></tr></table></p>
    	<?php
    }
    }
    
    else
    {
    require_once 'db_connect.php';
    
    if ($_SESSION['is_valid'] == false)
    {
    	if (isset($_POST['login']))
    	{
    
    	$user_name = $_POST["user_name"];        
    	$user_password = $_POST["user_password"]; 
    	$cookiename = forumcookie;   
    	$verify_username = strlen($user_name);
    	$verify_pass = strlen($user_password);
    		if ($verify_pass > 0 && $verify_username > 0)
    		{
    		$salt = substr($user_password, 0, 2);
    		$userPswd = crypt($user_password, $salt);
    		$sql = "SELECT * FROM `$user` WHERE user_name='$user_name' AND user_password='$userPswd' LIMIT 1;";
    		$result = mysql_query($sql);
    			if (mysql_num_rows($result) == 1)
    			{
    			$row = mysql_fetch_assoc($result);
    			$user_level = $row['userlevel'];
    				if ($user_level == 1) 
    				{
    				$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = 	'$_GET[p]'"));
    
    				$userright = array($login_check['user_name'], $login_check['userlevel']);
    				$s_userpass = serialize($userpass);
    				$_SESSION['username'] = $row['user_name'];
    				$_SESSION['user_password'] = $row['user_password'];
    				$_SESSION['user_level'] = $row['userlevel'];
    				$_SESSION['user_id'] = $row['user_id'];
    				header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    				$_SESSION['is_valid'] = true;
    					 if(isset($_POST['remember']))
    					 {
        					  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        					  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       			}
    			} 
    		elseif ($user_level == 2){    
    			$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = '$_GET[p]'"));
    
    			$userright = array($login_check['user_name'], $login_check['userlevel']);
    		$s_userpass = serialize($userpass);
    	$_SESSION['username'] = $row['user_name'];
    	$_SESSION['user_password'] = $row['user_password'];
    	$_SESSION['user_level'] = $row['userlevel'];
    	$_SESSION['user_id'] = $row['user_id'];
    	header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    	$_SESSION['is_valid'] = true; //change the session variable name to what you want, just remember it for all files
    	 if(isset($_POST['remember'])){
        	  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        	  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       		}
    	}
    }
    else{
    	echo "Login failed. Username and Password did not match database entries.";    
    }
    }
    
    else
    {
    echo "Form was not completed. Please go back and make sure that the form was fully completed.";    
    }
    }
    $server = str_replace("?logout=true","",$_SERVER['PHP_SELF']);
    ?> 
    
    <html>
    <table bgcolor='#999999' align='right'><form action="<?php echo $server ?>" method='POST'>
    <tr><td>Username: </td><td><input type='text' name='user_name' /><br /></td></tr>
    <tr><td>Password:</td><td> <input type='password' name='user_password' /><br /></td></tr>
    <tr><td><input type="hidden" name="login" value="true"><input type="submit" value="Submit"></td></tr>
    <tr><td><input type="checkbox" value="1" name="remember"> Remember Me </td></tr><tr><td><a href="register.php">[Register]</a></td></tr><tr><td><a href="forgot_password.php">[Forgot Password?]</a></td></tr></table>
    </form>
    </html>
    
    <?php 
    mysql_close();
    }
    else
    {
    header("Location:http://".$_SERVER[HTTP_HOST]);
    }
    }
    ?>
    
    

  3. I have this code

    <?php
    if (isset($_GET['logout']))
    {
    setcookie("cookname", $_SESSION['username'], time() - 3600, "/");
    setcookie("cookpass", $_SESSION['user_password'], time() - 3600, "/");
    session_unset();
    session_destroy();
    }
    if ($_SESSION['is_valid'] == true)
    {
    if ($_SESSION['user_level'] == 2)
    {
    	?>
    	<table class='logged_in'><tr><td>
    	<p>Welcome, <br><?php echo $_SESSION['username']; ?>
    	<br><a href='user_profile.php?id=<?php echo $_SESSION['user_id']; ?>'>User Profile</a><br>
    	<a href='user_setting.php'>Settings</a><br>
    	<a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />
    	</td></tr><tr><td>Logged In</td></tr></table></p>
    	<?php 
    }
    
    elseif ($_SESSION['user_level'] == 1)
    {
    	?>
    	<table class='logged_in'><tr><td>
    	<p>Welcome, <?php echo $_SESSION['username']; ?>
    	<br><a href='user_profile.php?id=<?php echo $_SESSION['user_id']; ?>'>User Profile</a><br>	
    	<a href='user_setting.php'>Settings</a><br>
    	<a href='admin_centre.php'>Admin Area</a><br>
    	<a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />
    	</td></tr><tr><td>Logged In</td></tr></table></p>
    	<?php
    }
    }
    
    else
    {
    require_once 'db_connect.php';
    
    if ($_SESSION['is_valid'] == false)
    {
    	if (isset($_POST['login']))
    	{
    
    	$user_name = $_POST["user_name"];        
    	$user_password = $_POST["user_password"]; 
    	$cookiename = forumcookie;   
    	$verify_username = strlen($user_name);
    	$verify_pass = strlen($user_password);
    		if ($verify_pass > 0 && $verify_username > 0)
    		{
    		$salt = substr($user_password, 0, 2);
    		$userPswd = crypt($user_password, $salt);
    		$sql = "SELECT * FROM `$user` WHERE user_name='$user_name' AND user_password='$userPswd' LIMIT 1;";
    		$result = mysql_query($sql);
    			if (mysql_num_rows($result) == 1)
    			{
    			$row = mysql_fetch_assoc($result);
    			$user_level = $row['userlevel'];
    				if ($user_level == 1) 
    				{
    				$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = 	'$_GET[p]'"));
    
    				$userright = array($login_check['user_name'], $login_check['userlevel']);
    				$s_userpass = serialize($userpass);
    				$_SESSION['username'] = $row['user_name'];
    				$_SESSION['user_password'] = $row['user_password'];
    				$_SESSION['user_level'] = $row['userlevel'];
    				$_SESSION['user_id'] = $row['user_id'];
    				header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    				$_SESSION['is_valid'] = true;
    					 if(isset($_POST['remember']))
    					 {
        					  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        					  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       			}
    			} 
    		elseif ($user_level == 2){    
    			$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = '$_GET[p]'"));
    
    			$userright = array($login_check['user_name'], $login_check['userlevel']);
    		$s_userpass = serialize($userpass);
    	$_SESSION['username'] = $row['user_name'];
    	$_SESSION['user_password'] = $row['user_password'];
    	$_SESSION['user_level'] = $row['userlevel'];
    	$_SESSION['user_id'] = $row['user_id'];
    	header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    	$_SESSION['is_valid'] = true; //change the session variable name to what you want, just remember it for all files
    	 if(isset($_POST['remember'])){
        	  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        	  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       		}
    	}
    }
    else{
    	echo "Login failed. Username and Password did not match database entries.";    
    }
    }
    
    else
    {
    echo "Form was not completed. Please go back and make sure that the form was fully completed.";    
    }
    }
    $server = str_replace("?logout=true","",$_SERVER['PHP_SELF']);
    ?> 
    
    <html>
    <table bgcolor='#999999' align='right'><form action="<?php echo $server ?>" method='POST'>
    <tr><td>Username: </td><td><input type='text' name='user_name' /><br /></td></tr>
    <tr><td>Password:</td><td> <input type='password' name='user_password' /><br /></td></tr>
    <tr><td><input type="hidden" name="login" value="true"><input type="submit" value="Submit"></td></tr>
    <tr><td><input type="checkbox" value="1" name="remember"> Remember Me </td></tr><tr><td><a href="register.php">[Register]</a></td></tr><tr><td><a href="forgot_password.php">[Forgot Password?]</a></td></tr></table>
    </form>
    </html>
    
    <?php 
    mysql_close();
    }
    else
    {
    header("Location:http://".$_SERVER[HTTP_HOST]);
    }
    }
    ?>
    
    

     

    which shows certain links depending on the user level, but now i don't no what i done but it doesn't show the admin link.

    any ideas?? i haven't changed this code but i have changed other codes and all my tables are the same and i have two users with different levels , testing this out on.

  4. thanks, i think i was close

    mine was

    <?php
    require_once 'db_connect.php';
    if (isset($_GET['id'])) {
    $user_id = $_GET['id'];
    $sql = "SELECT * FROM $user WHERE `user_id`='{$user_id}' LIMIT 0,1;";
    $result = mysql_query($sql);
    $row = mysql_fetch_assoc($result);
    $username = $row['user_name'];
    $email = $row['user_email'];
    echo "$username<br>";
    $show_email = $row['show_email'];
    if ($show_email == 1)
    { 
    echo "Email:<a href='mailto:$email'>$email</a>";
    
    }
    elseif ($show_email == 0)
    {
    echo "Email:Hidden";
    }
    }
    ?>
    Members
    <?php 
    $sql1 = "SELECT * FROM $user WHERE `user_name` AND `user_id`";
    $result1 = mysql_query($sql1);
    $row1 = mysql_fetch_assoc($result1);
    $username1 = $row1['user_name'];
    $userid = $row1['user_id'];
    ?>
    <a href="?id=<?php echo "$userid"; ?>"><?php echo "$username1"; ?></a>

  5. is this the right thing

     

    <?php
    if (isset($_GET['id'])) {
    $user_id = 'id';
    $sql = "SELECT * FROM $user WHERE `user_id`='{$user_id}' LIMIT 0,1;";
    $result = mysql_query($sql);
    $row = mysql_fetch_assoc($result);
    $username = $row['user_name'];
    $email = $row['user_email'];
    echo "$username<br>";
    $show_email = $row['show_email'];
    if ($show_email == 1)
    { 
    echo "Email:<a href='mailto:$email'>$email</a>";
    
    }
    elseif ($show_email == 0)
    {
    echo "Email:Hidden";
    }
    }
    else {
    echo "Invalid user ID passed to page!";
    }
    ?>
    
    <a href="?id=1">Blade</a>

  6. i have a user profile page, this page works by checking the users session_id and then gets this data from the database. Now how can i display this to other users, for example, so other users can view other users profiles(this is a really bad explanation).

     

    this is my current page

    <?php
    require_once 'db_connect.php';
    require_once 'nav_bar.php';
    require_once 'logged_in.php';
    
    if ($_SESSION['is_valid'] == true){
    
    $user_id = $_SESSION['user_id'];
    $sql = "SELECT * FROM $user WHERE `user_id`='{$user_id}' LIMIT 0,1;";
    $result = mysql_query($sql);
    $row = mysql_fetch_assoc($result);
    $username = $row['user_name'];
    $email = $row['user_email'];
    echo "$username<br>";
    $show_email = $row['show_email'];
    if ($show_email == 1)
    { 
    echo "Username:<a href='mailto:$email'>$email</a>";
    }
    elseif ($show_email == 0)
    {
    echo "Email:Hidden";
    }
    }
    else
    {
    echo "Please login to view this page.";
    }
    ?>

  7. well this is my whole code,

    <?php
    if (isset($_GET['logout']))
    {
    setcookie("cookname", $_SESSION['username'], time() - 3600, "/");
    setcookie("cookpass", $_SESSION['user_password'], time() - 3600, "/");
    session_unset();
    session_destroy();
    }
    
    if ($_SESSION['is_valid'] == true){
    if ($_SESSION['user_level'] == 2){
    ?>
    <table class='logged_in'><tr><td>
    <p>Welcome, <br><?php echo $_SESSION['username']; ?>
    <br><a href='user_profile.php?id=<?php echo $_SESSION['user_id']; ?>'>User Profile</a><br>
    <a href='user_setting.php'>Settings</a><br>
    <a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />
    </td></tr><tr><td>Logged In</td></tr></table></p>
    <?php 
    }
    if ($_SESSION['user_level'] == 1){
    ?>
    <table class='logged_in'><tr><td>
    <p>Welcome, <?php echo $_SESSION['username']; ?>
    <br><a href='user_profile.php?id=<?php echo $_SESSION['user_id']; ?>'>User Profile</a><br>
    <a href='user_setting.php'>Settings</a><br>
    <a href='admin_centre.php'>Admin Area</a><br>
    <a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />
    </td></tr><tr><td>Logged In</td></tr></table></p>
    <?php
    }
    }
    else
    {
    require_once 'db_connect.php';
    
    if ($_SESSION['is_valid'] == false){
    if (isset($_POST['login'])){
    
    $user_name = $_POST["user_name"];        
    $user_password = $_POST["user_password"]; 
    $cookiename = forumcookie;   
    $verify_username = strlen($user_name);
    $verify_pass = strlen($user_password);
    if ($verify_pass > 0 && $verify_username > 0)
    {
    $salt = substr($user_password, 0, 2);
    $userPswd = crypt($user_password, $salt);
    $sql = "SELECT * FROM `$user` WHERE user_name='$user_name' AND user_password='$userPswd' LIMIT 1;";
    $result = mysql_query($sql);
    if (mysql_num_rows($result) == 1){
    	$row = mysql_fetch_assoc($result);
    	$user_level = $row['userlevel'];
    	if ($user_level == 1) {
    		$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = 	'$_GET[p]'"));
    
    		$userright = array($login_check['user_name'], $login_check['userlevel']);
    		$s_userpass = serialize($userpass);
    	$_SESSION['username'] = $row['user_name'];
    	$_SESSION['user_password'] = $row['user_password'];
    	$_SESSION['user_level'] = $row['userlevel'];
    	$_SESSION['user_id'] = $row['user_id'];
    	header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    	$_SESSION['is_valid'] = true; //change the session variable name to what you want, just remember it for all files
    	 if(isset($_POST['remember'])){
        	  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        	  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       		}
    	} 
    		elseif ($user_level == 2){    
    			$login_check = @mysql_fetch_array(mysql_query("SELECT * from `$user` WHERE user_name = '$_GET[u]' AND user_password = '$_GET[p]'"));
    
    			$userright = array($login_check['user_name'], $login_check['userlevel']);
    		$s_userpass = serialize($userpass);
    	$_SESSION['username'] = $row['user_name'];
    	$_SESSION['user_password'] = $row['user_password'];
    	$_SESSION['user_level'] = $row['userlevel'];
    	$_SESSION['user_id'] = $row['user_id'];
    	header("Location:http://".$_SERVER[HTTP_HOST].$_SERVER[REQUEST_URI]);
    	$_SESSION['is_valid'] = true; //change the session variable name to what you want, just remember it for all files
    	 if(isset($_POST['remember'])){
        	  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
        	  setcookie("cookpass", $_SESSION['user_password'], time()+60*60*24*100, "/");
       		}
    	}
    }
    else{
    	echo "Login failed. Username and Password did not match database entries.";    
    }
    }
    
    else
    {
    echo "Form was not completed. Please go back and make sure that the form was fully completed.";    
    }
    }
    ?> 
    
    <html>
    <table bgcolor='#999999' align='right'><form action="<?php $_SERVER['PHP_SELF']; ?>" method='POST'>
    <tr><td>Username: </td><td><input type='text' name='user_name' /><br /></td></tr>
    <tr><td>Password:</td><td> <input type='password' name='user_password' /><br /></td></tr>
    <tr><td><input type="hidden" name="login" value="true"><input type="submit" value="Submit"></td></tr>
    <tr><td><input type="checkbox" value="1" name="remember"> Remember Me </td></tr><tr><td><a href="register.php">[Register]</a></td></tr><tr><td><a href="forgot_password.php">[Forgot Password?]</a></td></tr></table>
    </form>
    </html>
    
    <?php 
    mysql_close();
    }
    else
    {
    header("Location:http://".$_SERVER[HTTP_HOST]);
    }
    }
    ?>

    as you can see it has the login form intergrated

  8. i am having another problem now, i am using this code

    if (isset($_GET['logout']))
    {
    session_unset();
    session_destroy();
    setcookie("cookname", $_SESSION['username'], time() - 3600, "/");
    setcookie("cookpass", $_SESSION['user_password'], time() - 3600, "/");
    }

     

    with this

    <a href="<?php print $_SERVER["PHP_SELF"]; ?>?logout=true">Logout</a><br />

     

    but now when i have been logged out, the page displays a login form but it doesn't work.

    i get this address when i log out

    http://deanwhitehouse.awardspace.co.uk/test/main_forum.php?logout=true

     

    but if i delete the logout=true bit , i can login ,but not if its theres

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.