When you have everything working, and something for security (htaccess), try 
redirecting by, NOT
printing a content-type (text/html or whatever), then print this:
print "Location: http://www.domain.com/path/morepath/file.html\n\n";;
    The capitalization and space are very important.

Regards,
David


----- Original Message -----
From: "zentara" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 04, 2002 8:10 AM
Subject: Re: Username & Password Question


On Wed, 3 Jul 2002 08:30:35 -0700, [EMAIL PROTECTED] (Rhen Hernandez) wrote:

>hi everyone!
>
>I created a password and username for my website.  My question is how can i direct 
>the user to the
homepage or main page of the website.  Right now, the code is set for "Permission 
Granted..."  I
want to direct the user to the main page of the website after he/she is successful 
completed the
form.

Maybe I'm wrong here, I'm just quickly reading the code,
but I don't think this approach gives you any REAL password
protection.

If you do the password check as you describe in your code,
then redirect to a unprotected page, such as
http://mygoodpassword.html

what is to stop someone from bypassing your login page
and entering the destination page directly in thier browser?

You need to either .htaccess protect your destination page,
which makes your logon form a waste of time, or you need
to output your html from the cgi-script that does the password
checking.





--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to