Login page for secure directory

[arifsor]

Hello

i have a secure directory /cp/ with some password

i want to create a page in php for checking password.

any idea how?

[Greaser9780]

Do you have a username and password or just a password to access secure data?

 

[arifsor]

basically i secure my online directory with user and password when i go to that page which is inside the directory, browser shows the promot for user name and password.

 

i want to create a login page instead of it

[JasonLewis]

how is the username and password stored? have you secured the directory by using cPanel or is it done by php with the data being called from the MySQL database?

[arifsor]

i secure the directory through cpanel

[arifsor]

any idea???

[arifsor]

let me explain again.

i am using a secure directory authantication for login on my site.

ie. /cp/

is that possible to make a logout page for this kind of login.

[Greaser9780]

Would love to help, but I constructed mine with php and mysql. I have no idea what cPANEL is.

[redarrow]

cpannel is for hosting websites and within cpannel you add services for users have you got php and mysql within the cpannel app.

[arifsor]

any one have any idea?

[superuser2]

Securing through cPanel secures it with .htaccess. I'm not sure if it's possible to use a php login form for .htaccess but know that might help someone else help you.

[ataria]

Password Protect Directories

 

 

^ do that.

[corbin]

You can recreate the effect of the .htaccess file with PHP using headers, but you would have to undo the .htaccess first.

[marcus]

You can use PHP most definitely. Here's one I just made. I haven't tested it, but if any errors occur you could probably pick them out.

 

On all pages add this:

<?php
if(!isset($_SESSION[logged])){
header("Location: login.php");
}else {
//content
}
?>

//this will be login.php

<?php
session_start();
if(!isset($_SESSION[logged])){
if(!isset($_POST[action])){
echo "<table border=0 cellspacing=3 cellpadding=2>\n";
echo "<tr><td colspan=2 align=right><h3>Login</h3></td></tr>\n";
echo "<form name=login method=post action=login.php>\n";
echo "<tr><td>Username:</td><td><input type=text name=username value=''></td></tr>\n";
echo "<tr><td>Password:</td><td><input type=password name=password></td></tr>\n";
echo "<tr><td colspan=2 align=right><input type=hidden name=action value=login><input type=submit value='Login!'></td></tr>\n";
echo "</form></table>\n";
}else {
	if($_POST[action] == login){
	$username = "setyourusernamehere";
	$password = "setyourpasswordhere";
	$un = $_POST[username];
	$pw = $_POST[password];
		if(isset($un) && isset($pw)){
			if($un == $username && $pw == $password){
			$_SESSION[logged] = "yes";
			header("Location: index.php");
			}else {
			echo "The username and password combination was incorrect!";
			}
		}else {
		echo "You did not supply either a username or a password!";
		}
	}else {
	echo "Error in the file!";
	}
}
}else {
header("Location: index.php");
}
?>

[arifsor]

Thanks mgallforever, but i am not using form base login screen. i am using a password protected direcotry for login purpose.

 

can we unset the server variables like $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW']

[JasonLewis]

i am not sure, never tried it, why dont you try it and see what happens.