Where to create 'members area' files?

[Love2c0de]

Good evening,

 

I have a site where you can login and it works all fine and dandy. Currently, after login, they are sent back to the homepage, where PHP checks whether a session is set to decide upon what content to print. I am going to change this so that they redirect to an actual members area.

 

I have tried to create a visual of my site directory to help assist my question. Here it is:

 

[] = Directory Name

--> Sub Files



[GamingSite]

    -->index.php

    [styles]

    [js]

    [images]

    [core]

    

//Inside [core]



-->register.php

-->login.php

-->logout.php

-->upload.php

-->sidebars.php

-->initialize.php

-->reset.php

-->page_views.txt

[content]

[db_queries]

[demos]

 

Where should I create my content for the members area? Should I create a new directory within the /core/ directory let's say core/members_area/ or should I just put it with my other page content (which is in the /content/ directory, believe it or not! )?

 

Thanks in advance for your thoughts & assistance.

 

Kind regards,

 

L2c.

[jcbones]

Members area?  restricted access?

 

This is really a personal taste thing.  AS you can put it anywhere you want to.  Some people opt to put it above the public HTML folder (htdocs), others prefer to put it inside of the public directory and .htaccess deny anyone from using it.  Still others just let their log in system handle all of the security (must be very robust).  All in all, it is your decision. 

[Love2c0de]

Thanks for your reply.

 Some people opt to put it above the public HTML folder (htdocs),

That's exactly what I have read about which is why I was unsure of whether it was a 'standard' thing to do for member areas.

 

Still others just let their log in system handle all of the security (must be very robust)

After reading this I immediately thought about checking whether a session is set, and if it isn't, then header them back to the homepage or something. Would that suffice or would there have to be other checks put in place to make sure someone doesn't just access the area without being logged in, and if so, would you be able to give me a hint at what I should be looking for?

 

Kind regards,

 

L2c.

Edited March 13, 2013 by Love2c0de