Jump to content


Photo

Protecting html files...


  • Please log in to reply
5 replies to this topic

#1 Unknown User

Unknown User
  • Members
  • PipPip
  • Member
  • 16 posts

Posted 04 September 2006 - 03:08 PM

Okay, so i got the member thing sorted now, but a members page, so far its just a html page. When the user logs in, they are redirected to it.

But there's nothing stopping somebidy from putting the address into their browser and going straight to it. Is there anything i can do?

#2 wildteen88

wildteen88
  • Staff Alumni
  • Advanced Member
  • 10,482 posts
  • LocationUK, Bournemouth

Posted 04 September 2006 - 03:15 PM

How do you verify someone is logged in? Rename the html file so it has a php extension (filename.html to filename.php). Then at the top of that page add in the PHP code that you use to verify someone is logged in.

#3 Unknown User

Unknown User
  • Members
  • PipPip
  • Member
  • 16 posts

Posted 04 September 2006 - 03:16 PM

And it still reads all of the HTML below the php code? Hmm...

#4 GingerRobot

GingerRobot
  • Staff Alumni
  • Advanced Member
  • 4,086 posts
  • LocationUK

Posted 04 September 2006 - 03:20 PM

Yes. In your log in process you need to set a session. So, if the user should be logged in, use:
<?php
$_SESSION['username'] = $username;//change to whatever variable contains the username
?>
You will also need to put:
<?php
session_start();
?>
At the top of the log in script.

Then, i would recommend enclosing the following in a new php file, perhaps called logincheck.php:
<?php
session_start();
if(empty($_SESSION['username']){//check to see if there is anything in the session; if not, redirect to the log in page
header("location:login.php");
exit;
}
?>

Then, all of your files that require a user to be logged in, use:
<?php
include("logincheck.php");
?>
//all of the rest of the html

You will also need to change all of these to php files.

#5 Unknown User

Unknown User
  • Members
  • PipPip
  • Member
  • 16 posts

Posted 04 September 2006 - 03:22 PM

Yeah i already had that part started. I only looked at PHP yesterday, and i didn't know you could have html below php, this makes things so much easier. Well it works now, thanks.

And btw wildteen88 i notice you incredibly helpful around these here forums

#6 Unknown User

Unknown User
  • Members
  • PipPip
  • Member
  • 16 posts

Posted 04 September 2006 - 04:36 PM

Ah, all is well, you can now login, logout, if you go to the login page it remebers that you alreday have... aah, relax.

Incase you where wondering, the site you've been so kindly helping me with is http://www.skgenius.co.nr it's contents are probably of no intrest to you but, y'know.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users