| SitePoint Sponsor |
Is it possible to have a series of pages that are protected by a password. I have database results that are contained over a series of four pages depending on which table you view, but I only want certain people to be able to see them? Is it possible to have somebody input a password only once and then it's remembered regardless of which page they go to for say 20 minutes?
Yes. To login, you add a $_SESSION variable for their data, and then look for the $_SESSION in the password-protected pages.
Also look into the COOKIE method, as it will keep them logged in even if they close the window, for your chosen time period.
Jake Arkinstall
"Sometimes you don't need to reinvent the wheel;
Sometimes its enough to make that wheel more rounded"-Molona
haveat the top of your pages you want protected, along withCode PHP:
Code PHP:if(!$_SESSION['loggedin']) exit;
When the user logs... (make sure session_start() is on your login page)
Code PHP:if($_POST['username'] == 'ted' && $_POST['password'] == 'turner'){ $_SESSION['loggedin'] = 1 header("yourprotectedpage.php"); } else { echo 'Login information is incorrect!'; }
Sorry to sound really stupid, but where do I keep the usernames and passwords? Is it in a database?
With the example I gave you, the username is set in the page. I suggest searching the forums for using them with a database. The HTML for the page would look something like this:
Code HTML4Strict:<form method="post"> Username: <input type="text" name="username" /> <br /> Password: <input type="text" name="password" /> <br /> <input type="submit" name="submit" value="Login" /> </form>
The PHP would look like this...
Thanks for that, I'll have a look
Sorry one other question. In your reply you hadbut when I changed that to my own page I got an error saying that there was aPHP Code:header("yourprotectedpage.php");
on line 5 which is the line that has the header bit of the codeParse error: parse error, unexpected T_STRING
it should be:
PHP Code:header("location: yourprotectedpage.php");
Jake Arkinstall
"Sometimes you don't need to reinvent the wheel;
Sometimes its enough to make that wheel more rounded"-Molona
Thanks, sowould work?PHP Code:<?php
session_start();
echo 'please log in';
if(isset($_POST['submit'])){
if($_POST['username'] == 'ted' && $_POST['password'] == 'test'){
$_SESSION['loggedin'] = 1
header("location: yourprotectedpage.html");
} else {
echo 'Login information is incorrect!';
}
}
?>
Not quite, but close. I would use:
You shouldn't send a header after text has been output. Also line 6 had no ";", and it's strictly incorrect (although not bad practice) to use boolean values rather than integer values for true/false variables.PHP Code:<?php
session_start();
if(isset($_POST['submit'])){
if($_POST['username'] == 'ted' && $_POST['password'] == 'test'){
$_SESSION['loggedin'] = TRUE;
header("location: yourprotectedpage.html");
} else {
echo 'Login information is incorrect!';
}
}
echo 'please log in';
?>
Jake Arkinstall
"Sometimes you don't need to reinvent the wheel;
Sometimes its enough to make that wheel more rounded"-Molona
Thanks, I'll give it a go
Sorry I keep on getting an error saying that the page cannot be displayed when I try click on the login button. But if I go direct to the page without using the login form I can see it. I'm sure that I've got something wrong somewhere so have added all of the code for the page, which incidently is called databases.phpCode:<?php session_start(); if(isset($_POST['submit'])){ if($_POST['username'] == 'ted' && $_POST['password'] == 'test'){ $_SESSION['loggedin'] = TRUE; header("location: results2.html"); } else { echo 'Login information is incorrect!'; } } echo 'please log in'; ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" /> <title>Untitled Document</title> </head> <body> <form action="results2.html" method="post"> Username: <input type="text" name="username" /> <br /> Password: <input type="password" name="password" /> <br /> <input type="submit" name="submit" value="Login" /> </form> </body> </html>
Sorry I forgot to mention that I'm using php 4.3.2. I don't know if that makes any difference, but thought I should mention it.
So you're saying that results2.html does exist? What does it look like?
Jake Arkinstall
"Sometimes you don't need to reinvent the wheel;
Sometimes its enough to make that wheel more rounded"-Molona
It's just a plain page with four images, three of which are links to php files. That's all that is on the page
Try changing the line:
toPHP Code:<form action="results2.html" method="post">
PHP Code:<form action="<? echo $_SERVER['PHP_SELF']; ?>" method="post">
Jake Arkinstall
"Sometimes you don't need to reinvent the wheel;
Sometimes its enough to make that wheel more rounded"-Molona
Thank you that, it now works perfectly. One other question though, how do I protect other pages so that people don't need to keep on logging in when they got to a new page?
No worries I tried:and that seems to work.PHP Code:<?php
session_start();
if(!$_SESSION['loggedin']) exit;
?>
Thanks for your help
Posting Permissions
Bookmarks