Jump to content

Recommended Posts

Hi there

I have been working on a login PHP script and had it working until I made so change late at

 

night and forgot to back it up.

The script uses PHP and Javascript as well as a Mysql database.

The problem I am having is with the session closing unexpectedly when I go to enter the

 

profile (or any other button placed after the login). It is rather hard to explain so here

 

is the code

 

[syntax=php]<?php //login php script

include_once 'rnfunctions.php';

$theaction='index14.php';

function destroySession()

{

$_SESSION=array();

if ((session_id() != '') || isset($_COOKIE[session_name()])){

setcookie(session_name(),'', time()-2592000,'/');

session_destroy();

}

}

function startsessions($user,$pass,$theaction)

{

session_start();

session_name($user);

$_SESSION['user'] = $user;

$_SESSION['pass'] = $pass;

$theuser =($_SESSION['user']);

echo "You are now logged in as $theuser";

}

 

function loggedin($theaction)

{

echo <<<_END

<table>

<tr>

<td>

<form name="myform" method='post' action='$theaction'>

<input type='hidden' name='logout'value='logout' />

<a href="#" onMouseDown="submitform(0);">logout</a> |

</form>

</td>

<td>

<form name="myform2" method='post' action='$theaction'>

<input type='hidden' name='profile'value='profile' />

<a href="#" onMouseDown="submitform(2);">profile</a> |

</form>

</td>

<td>

<form name="myform3" method='post' action='$theaction'>

<input type='hidden' name='unregister'value='unregister' />

<a href="#" onMouseDown="submitform(3);">unregister</a>

</form>

</td>

</tr>

</table>

_END;

}

function loginform($theaction)

{

echo <<<_END

<table border="0">

<tr>

<form name="myform" method='post' action='$theaction'>

<td>Username->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana;

 

font-size: 12px; background-color: #1BCE11;" id ='password' id='username' size='12'

 

maxlength='16' name='user'

value='user' /></td>

</tr>

<tr>

<td>Password->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana;

 

font-size: 12px; background-color: #1BCE11;" id ='password' size='12' maxlength='16'

 

name='pass'

value='pass' /></td>

</tr>

<tr>

 

<td colspan="2"><a href="#" onMouseDown="submitform(0);">login</a></td>

</form>

</tr><tr><td colspan="2">

<form name="myform2" method='post' action='$theaction'>

<input type='hidden' name='register'value='register' />

<a href="#" onMouseDown="submitform(2);">register</a>

</form></td></tr>

<tr><td colspan="2">

<form name="myform3" method='post' action='$theaction'>

<input type='hidden' name='reset'value='reset' />

<a href="#" onMouseDown="submitform(3);">reset password</a></td>

</tr>

</table>

_END;

}

function regform($theaction)

{

echo <<<_END

<table border="0">

<tr>

<form name="myform" method='post' action='$theaction'>

<td>Username->    </td><td> <input type='text'STYLE="color: #FFFFFF; font-family: Verdana; 

 

font-size: 12px; background-color: #1BCE11;" size='12' maxlength='16' name='username'

value='username' onBlur='checkUser(this)'/></td>

</tr>

<tr>

<td>Password->    </td><td> <input type='password' STYLE="color: #FFFFFF; font-family:

 

Verdana;  font-size: 12px; background-color: #1BCE11;" size='12' maxlength='16'

 

name='password'

value='password' onBlur='checkpass(this)'/></td>

</tr>

<tr>

<td>Email->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana;

 

font-size: 12px; background-color: #1BCE11;"size='12' maxlength='30' name='email'

value='email' onBlur='checkEmail(this)'/></td>

</tr>

<tr>

<td colspan="2"><a href="#" onMouseDown="submitform(0);">register</a>

</form></td></tr><tr>

<td colspan="2">

<form name="myform2" method='post' action='$theaction'>

<input type='hidden' name='login'value='login' />

<a href="#" onMouseDown="submitform(2);">login</a>

</form>

</td>

</tr>

</table>

<span id='logtext'></span>

_END;

}

function retlogin($theaction)

{

echo <<<_END

<form name="myform" method='post' action='$theaction'>

<input type='hidden' name='login'value='login' />

<a href="#" onMouseDown="submitform(0);">back to login</a>

</form>

_END;

}

function resetform($theaction)

{

echo <<<_END

<table border="0">

<tr>

<form name="myform" method='post' action='$theaction'>

<td>Enter New Password->    </td><td> <input type='password' STYLE="color: #FFFFFF;

 

font-family: Verdana; font-size: 12px; background-color: #1BCE11;"size='12' maxlength='16'

 

name='password1'

value='password1' onBlur='checkpass(this)'/></td>

</tr>

<tr>

<td>Email->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana;

 

font-size: 12px; background-color: #1BCE11;" id ='password' size='12' maxlength='30'

 

name='email'

value='email'onBlur='checkreset(this)'/></td>

</tr>

<tr>

<td colspan="2"><a href="#" onMouseDown="submitform(0);">reset password</a>

</form></td></tr><tr>

<td colspan="2">

<form name="myform2" method='post' action='$theaction'>

<input type='hidden' name='login'value='login' />

<a href="#" onMouseDown="submitform(2);">back to login</a>

</form>

</td>

</tr>

</table>

<span id='logtext'></span>

_END;

}

 

if (isset($_POST['login']))

{

loginform($theaction);

}

elseif (isset($_POST['logout']))

{

echo "you have logged out";

destroySession();

loginform($theaction);

}

//recieve reset password call

elseif (isset($_POST['reset']))

{

resetform($theaction);

}

//recieve reset password info

elseif (isset($_POST['password1']))

{

$theemail = $_POST['email'];

$newpass = $_POST['password1'];

//salt hash password for replacement

$newpass = encriptpass($newpass);

$query = "SELECT * FROM users WHERE email='$theemail'";

if (mysql_num_rows(queryMysql($query)) == 0)

{

echo "Email invalid please register<br />";

regform($theaction);

}

else

{

$message = validate_password($newpass);

if ($message =="")

{

$regaddress =

 

"http://www.imandanband.com.resetpass.php?newpass=".$newpass."&email=".$theemail;

$to = $theemail;

$subject = "Reset password at Imandan";

$body = "Hi there,\n\nYou have requested to reset your password to

 

$newpass.\n\nPlease click the following link to validate your new password\n\n$regaddress or

 

ignore this message if it has been sent in error";

if (mail($to, $subject, $body)) {

  echo("Message successfully sent! Go to your email to

 

validate your new password");

retlogin($theaction);

  } else {

  echo("Message delivery failed...You must enter a valid email

 

address");

}

}

 

        }

}

elseif (isset($_POST['user']))

{

$user = sanitizeString($_POST['user']);

$pass = sanitizeString($_POST['pass']);

$pass = encriptpass($pass);

if ($user == "" || $pass == "")

{

$error = "Not all fields were entered<br />";

}

else

{

$query = "SELECT user, pass FROM users WHERE user='$user' AND pass ='$pass'";

 

if (mysql_num_rows(queryMysql($query)) == 0)

{

echo "Username/Password invalid<br />";

loginform($theaction);

}

else

{

startsessions($user,$pass,$theaction);

showprofile();

 

}

}

Hi there

I have been working on a login PHP script and had it working until I made so change late at

 

night and forgot to back it up.

The script uses PHP and Javascript as well as a Mysql database.

The problem I am having is with the session closing unexpectedly when I go to enter the

 

profile (or any other button placed after the login). It is rather hard to explain so here

 

is the PHP code

<?php //login php script	
include_once 'rnfunctions.php';
$theaction='index14.php';
function destroySession()
{
$_SESSION=array();
if ((session_id() != '') || isset($_COOKIE[session_name()])){
setcookie(session_name(),'', time()-2592000,'/');
[color=#FFBF40]session_destroy();[/color]
}
}
function startsessions($user,$pass,$theaction)
{
session_start();
session_name($user);
$_SESSION['user'] = $user;
$_SESSION['pass'] = $pass;
$theuser =($_SESSION['user']);
echo "You are now logged in as $theuser";
}

function loggedin($theaction)
{
echo <<<_END
<table>
<tr>
<td>
<form name="myform" method='post' action='$theaction'>
<input type='hidden' name='logout'value='logout' />
<a href="#" onMouseDown="submitform(0);">logout</a> |
</form>
</td>
<td>
////////////////////here is the problem point////////////////////////////////////
<form name="myform2" method='post' action='$theaction'>
<input type='hidden' name='profile'value='profile' />
<a href="#" onMouseDown="submitform(2);">profile</a> |
</form>
///////////////////////////////////////////////////////////////////////////////////
</td>
<td>
<form name="myform3" method='post' action='$theaction'>
<input type='hidden' name='unregister'value='unregister' />
<a href="#" onMouseDown="submitform(3);">unregister</a>
</form>
</td>
</tr>
</table>
_END;
}
function loginform($theaction)
{
echo <<<_END
<table border="0">
<tr>
<form name="myform" method='post' action='$theaction'>
<td>Username->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana; 

font-size: 12px; background-color: #1BCE11;" id ='password' id='username' size='12' 

maxlength='16' name='user'
value='user' /></td>
</tr>
<tr>
<td>Password->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana; 

font-size: 12px; background-color: #1BCE11;" id ='password' size='12' maxlength='16' 

name='pass'
value='pass' /></td>
</tr>
<tr>

<td colspan="2"><a href="#" onMouseDown="submitform(0);">login</a></td>
</form>
</tr><tr><td colspan="2">
<form name="myform2" method='post' action='$theaction'>
<input type='hidden' name='register'value='register' />
<a href="#" onMouseDown="submitform(2);">register</a>
</form></td></tr>
<tr><td colspan="2">
<form name="myform3" method='post' action='$theaction'>
<input type='hidden' name='reset'value='reset' />
<a href="#" onMouseDown="submitform(3);">reset password</a></td>
</tr>
</table>
_END;
}
function regform($theaction)
{
echo <<<_END
<table border="0">
<tr>
<form name="myform" method='post' action='$theaction'>
<td>Username->    </td><td> <input type='text'STYLE="color: #FFFFFF; font-family: Verdana;  

font-size: 12px; background-color: #1BCE11;" size='12' maxlength='16' name='username'
value='username' onBlur='checkUser(this)'/></td>
</tr>
<tr>
<td>Password->    </td><td> <input type='password' STYLE="color: #FFFFFF; font-family: 

Verdana;  font-size: 12px; background-color: #1BCE11;" size='12' maxlength='16' 

name='password'
value='password' onBlur='checkpass(this)'/></td>
</tr>
<tr>
<td>Email->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana; 

font-size: 12px; background-color: #1BCE11;"size='12' maxlength='30' name='email'
value='email' onBlur='checkEmail(this)'/></td>
</tr>
<tr>
<td colspan="2"><a href="#" onMouseDown="submitform(0);">register</a>
</form></td></tr><tr>
<td colspan="2">
<form name="myform2" method='post' action='$theaction'>
<input type='hidden' name='login'value='login' />
<a href="#" onMouseDown="submitform(2);">login</a>
</form>
</td>
</tr>
</table>
<span id='logtext'></span>
_END;
}
function retlogin($theaction)
{
echo <<<_END
<form name="myform" method='post' action='$theaction'>
<input type='hidden' name='login'value='login' />
<a href="#" onMouseDown="submitform(0);">back to login</a>
</form>
_END;
}
function resetform($theaction)
{
echo <<<_END
<table border="0">
<tr>
<form name="myform" method='post' action='$theaction'>
<td>Enter New Password->    </td><td> <input type='password' STYLE="color: #FFFFFF; 

font-family: Verdana; font-size: 12px; background-color: #1BCE11;"size='12' maxlength='16' 

name='password1'
value='password1' onBlur='checkpass(this)'/></td>
</tr>
<tr>
<td>Email->    </td><td> <input type='text' STYLE="color: #FFFFFF; font-family: Verdana; 

font-size: 12px; background-color: #1BCE11;" id ='password' size='12' maxlength='30' 

name='email'
value='email'onBlur='checkreset(this)'/></td>
</tr>
<tr>
<td colspan="2"><a href="#" onMouseDown="submitform(0);">reset password</a>
</form></td></tr><tr>
<td colspan="2">
<form name="myform2" method='post' action='$theaction'>
<input type='hidden' name='login'value='login' />
<a href="#" onMouseDown="submitform(2);">back to login</a>
</form>
</td>
</tr>
</table>
<span id='logtext'></span>
_END;
}

if (isset($_POST['login']))
{
loginform($theaction);
}
elseif (isset($_POST['logout']))
{
echo "you have logged out";
[color=#FFBF40]destroySession();[/color]
loginform($theaction);
}
//recieve reset password call
elseif (isset($_POST['reset']))
{
resetform($theaction);
}
//recieve reset password info
elseif (isset($_POST['password1']))
{
$theemail =	$_POST['email'];
$newpass =	$_POST['password1'];
//salt hash password for replacement
$newpass = encriptpass($newpass);
$query = "SELECT * FROM users WHERE email='$theemail'";
if (mysql_num_rows(queryMysql($query)) == 0)
{
echo "Email invalid please register<br />";
regform($theaction);
}
else
{
	$message = validate_password($newpass);
	if ($message =="")
	{
	$regaddress = 

"http://www.imandanband.com.resetpass.php?newpass=".$newpass."&email=".$theemail; 
	 	$to = $theemail;
			$subject = "Reset password at Imandan";
			$body = "Hi there,\n\nYou have requested to reset your password to 

$newpass.\n\nPlease click the following link to validate your new password\n\n$regaddress or 

ignore this message if it has been sent in error";
			if (mail($to, $subject, $body)) {
   				echo("Message successfully sent! Go to your email to 

validate your new password");
		retlogin($theaction);
  			} else {
  			echo("Message delivery failed...You must enter a valid email 

address");
		}
	}

        }
}
elseif (isset($_POST['user']))
{
$user = sanitizeString($_POST['user']);
$pass = sanitizeString($_POST['pass']);
$pass = encriptpass($pass);
if ($user == "" || $pass == "")
{
$error = "Not all fields were entered<br />";
}
else
{
$query = "SELECT user, pass FROM users WHERE user='$user' AND pass ='$pass'";

if (mysql_num_rows(queryMysql($query)) == 0)
{
echo "Username/Password invalid<br />";
loginform($theaction);
}
else
{
startsessions($user,$pass,$theaction);
showprofile();

}
}
}
else{
loginform($theaction);
}

The code that is marked is where I have the problem. It calls a javascript function to submit the form.

The javascript function is as follows

function submitform(num)
{
if (num == 2)
{
document.myform2.submit();
return 1;
}
if (num == 3)
{
document.myform3.submit();
return 1;
}
if (num == 4)
{
document.myform4.submit();
return 1;
}
if (num == 5)
{
document.myform5.submit();
return 1;
}
if (num == 6)
{
document.myform6.submit();
return 1;
}
else
{
document.myform.submit();
return 1;
}
}

I can log in though when I go to enter the profile the $_SESSION['user'] is gone and I am logged out. I just can't seem to track down the problem and it is frustrating the heck out of me.

If anyone has any ideas PLEASE help!

 

:confused:  :shrug:  >:(

 

You were right Denno that I didn't need session_start() at the top of the file though this didn't help with the problem I had. This also leaves me with the question how does the session start without this?

Thanks for the advice anyway! If there's anything else you can see that's wrong please point it out. I am only learning PHP and any pointers are great.

Thanks again!

Well I spoke too soon.

The script is now working on my home server though has the original problem from my online server. Also the online server appears to start sessions automatically so I had to remove the session_start() from the on line version of the index.php or I received an error.

Any ideas would be great!

 

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.