thesaleboat Posted January 30, 2009 Share Posted January 30, 2009 Hello, I am trying to develop an online resource library for our clients, which would have a login and redirect depending on the login. Here is my question, how can I make it impossible for a page to be loaded unless a person has successfully logged in? Link to comment https://forums.phpfreaks.com/topic/143171-solved-php-security/ Share on other sites More sharing options...
5kyy8lu3 Posted January 30, 2009 Share Posted January 30, 2009 Hello, I am trying to develop an online resource library for our clients, which would have a login and redirect depending on the login. Here is my question, how can I make it impossible for a page to be loaded unless a person has successfully logged in? use session variables. for example, set the variable if their login was correct $_SESSION['logged_in'] = 'yes'; but make sure you have a session_start(); just after your <?php before you do anything with session variables then on any page you don't want them to see without being logged in, you just add this: <?php session_start(); if ( $_SESSION['logged_in'] != 'yes' ) { header("Location: http://www.yoursite.com"); } ?> Link to comment https://forums.phpfreaks.com/topic/143171-solved-php-security/#findComment-750912 Share on other sites More sharing options...
thesaleboat Posted January 30, 2009 Author Share Posted January 30, 2009 Thank you for the fast reply, but most of the pages will be in HTML, is there a way to not display the HTML as well as send them back to the login page. Also the page would still be accessible if you just directly typed in the URL as opposed to going through the login, wouldn't it? Link to comment https://forums.phpfreaks.com/topic/143171-solved-php-security/#findComment-750919 Share on other sites More sharing options...
5kyy8lu3 Posted January 30, 2009 Share Posted January 30, 2009 Thank you for the fast reply, but most of the pages will be in HTML, is there a way to not display the HTML as well as send them back to the login page. Also the page would still be accessible if you just directly typed in the URL as opposed to going through the login, wouldn't it? nope, if you put that at the top of your page, it will see that you are not logged in because that session variable won't equal 'yes' so it will redirect you to http://www.yoursite.com or whatever you want to set that to. it does that before anything else so html you have on the rest of the page will not be visible and even if you went directly to that page it will still redirect you because you're not logged in Link to comment https://forums.phpfreaks.com/topic/143171-solved-php-security/#findComment-750924 Share on other sites More sharing options...
thesaleboat Posted January 30, 2009 Author Share Posted January 30, 2009 Thanks man! Link to comment https://forums.phpfreaks.com/topic/143171-solved-php-security/#findComment-750926 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.