Redirect upon login

[lukep11a]

Hi, I wonder if anyone can help me. I am running a fantasy football league, when a user logs in I want them to be directed to teamselections.php which is where they make their team selections, once they click submit their choices have been set and they will not need to do it again. So I thought at this point I could update the column 'firstlogin' in my 'login' table with a '1'.

 

So technically, it may not be just the first time they login (if for example they do not submit their team selections right away, or their pc crashes etc.), but until they have submitted their team selections 'firstlogin' value will be '0' so they will be directed to teamselections.php. Once they have submitted them 'firstlogin' value will be '1' and they will be directed to myaccount.php.

 

Hope that makes sense. So, what I am asking is how do I apply that to the code I already have. Sorry I am still relatively new to php! I would be so grateful if anyone can help me I have been tearing my hair out over this for days.

 

These are my login functions:

<?php

#### Login Functions #####


function isLoggedIn()
{

    if (session_is_registered('userid') && session_is_registered('email'))
    {
        return true; // the user is loged in
    } else
    {
        return false; // not logged in
    }

    return false;

}

function checkLogin($u, $p)
{
global $seed; // global because $seed is declared in the header.php file

    if (!valid_email($u) || !valid_password($p) || !user_exists($u))
    {
        return false; // the name was not valid, or the password, or the email did not exist
    }

    //Now let us look for the user in the database.
    $query = sprintf("
	SELECT userid 
	FROM login 
	WHERE 
	email = '%s' AND password = '%s' 
	AND disabled = 0 AND activated = 1 
	LIMIT 1;", mysql_real_escape_string($u), mysql_real_escape_string(sha1($p . $seed)));
    $result = mysql_query($query);
    // If the database returns a 0 as result we know the login information is incorrect.
    // If the database returns a 1 as result we know  the login was correct and we proceed.
    // If the database returns a result > 1 there are multple users
    // with the same email and password, so the login will fail.
    if (mysql_num_rows($result) != 1)
    {
        return false;
    } else
    {
        // Login was successfull
        $row = mysql_fetch_array($result);
        // Save the user ID for use later
        $_SESSION['userid'] = $row['userid'];
        // Save the email for use later
        $_SESSION['email'] = $u;
        // Now we show the userbox
        return true;
    }
    return false;
}


?>

 

This is my login script:

<?php
if (!isLoggedIn())
{
    // user is not logged in.
    if (isset($_POST['cmdlogin']))
    {
        // retrieve the email and password sent from login form & check the login.
        if (checkLogin($_POST['email'], $_POST['password']))
        {
            show_userbox();
        } else
        {
            echo "Incorrect Login information !";
            show_loginform();
        }
    } else
    {
        // User is not logged in and has not pressed the login button
        // so we show him the loginform
        show_loginform();
    }

} else
{
    // The user is already loggedin, so we show the userbox.
    show_userbox();
}
?>

 

I apologise for their being so much to read, I hope somebody can help.

[IrOnMaSk]

hey luke, if you want to redirect to different page, you need to create header for that...

example

header("Location: pathtopage.php"); 

if user loggin or submit or watever put above code in there and specify the path to the site you want them to go...

check manual for more info

http://php.net/manual/en/function.header.php

[rallport]

Just a quickie, but session_is_registered is depreciated as of PHP v5.3 - better to use isset to check for a session.