Login interface??

[common]

Hi all!

 

I want to create a login interface but i am not sure whats the right procedure. When the person login, for example with a username and password, its been checked by an if else statement,correct? But to where do i direct the the user? because if I only direct it to another page,its not really secure, because I can only put the other page name in the address bar...so how do I secure it??

 

Thanx

[MatthewJ]

Generally you would use sessions to store a variable once the user has logged in, then the page you're redirected to will have something like

 

<?php

if(!isset($_SESSION['validuser'])) {
header("Location: loginpage.php");
}

?>

 

Which will check for your session variable, if it isn't set, you know the person is not logged in yet, so you just send them back to the login page.