Re: [PHP] Login with Remember me Feature

2011-08-19 Thread Alekto Antarctica
Thank you for all the helpful input so far! I have now tried to implement the changes you suggested, but I unfortunately keep getting an error in line 114, in {-bracket in the switch statement. I know it is not very desirable to send all the code in a mail, but I think this is the best solution to

Re: [PHP] Login with Remember me Feature

2011-08-14 Thread Geoff Shang
On Sun, 14 Aug 2011, Alekto Antarctica wrote: I have tried to implement a cookie to remember the login for 48 hours, but it still logs the user out after the default 24min for a session like this: * //We compare the submited password and the real one, and we check if the user exist

Re: Re: [PHP] Login with Remember me Feature

2011-08-14 Thread Tim Streater
On 14 Aug 2011 at 14:23, Alekto Antarctica wrote: > *function loggedin()* > *{* > * if (isset($_SESSIONS['username']) || isset($_COOKIE['username']))* > * {* > * $loggedin = true;* > * return $loggedin;* > * }* > *}* Why not justreturn true; And what happens if your "if" doesn't evaluate t

Re: [PHP] Login with Remember me Feature

2011-08-14 Thread Tamara Temple
On Aug 14, 2011, at 8:23 AM, Alekto Antarctica wrote: Hi guys! I have now tried to take some of your hints into consideration, by encrypting the password with md5 adding a salt. As some of you pointed out, this code is the work of a newbie, that is totally correct, so please bear with me ;) I

Re: [PHP] Login with Remember me Feature

2011-08-14 Thread Alekto Antarctica
Hi guys! I have now tried to take some of your hints into consideration, by encrypting the password with md5 adding a salt. As some of you pointed out, this code is the work of a newbie, that is totally correct, so please bear with me ;) I have tried to implement a cookie to remember the login fo

Re: [PHP] Login with Remember me Feature

2011-08-07 Thread Alex Nikitin
On Sun, Aug 7, 2011 at 10:03 PM, Donovan Brooke wrote: > alekto wrote: > >> Hi, >> I have implemented a "remember" me feature in my login-script, but I can't >> get it to function! >> > > > If I might be so bold... then you haven't implemented the feature yet, > right? ;-) > > > > I want to make

Re: [PHP] Login with Remember me Feature

2011-08-07 Thread Donovan Brooke
alekto wrote: Hi, I have implemented a "remember" me feature in my login-script, but I can't get it to function! If I might be so bold... then you haven't implemented the feature yet, right? ;-) I want to make it possible for the users to stay logged in for 30 days. This is what I got th

Re: [PHP] Login with Remember me Feature

2011-08-07 Thread Andre Polykanine
Hello alekto, I've got several notes to point out: 1. You can't do neither a header(), nor a SetCookie() after any echo on the page. The out-of-php pieces of the page included. 2. Don't, please please don't store raw passwords in the database! Hash them, better even adding a salt. Th

[PHP] Login with Remember me Feature

2011-08-07 Thread alekto
Hi, I have implemented a "remember" me feature in my login-script, but I can't get it to function! I want to make it possible for the users to stay logged in for 30 days. This is what I got this far: This checkbox is placed Inside the index.php script, near by the username/password field. Rem

Re: [PHP] login to protected directory by php

2010-08-16 Thread Ashley Sheridan
On Mon, 2010-08-16 at 09:27 +0530, kranthi wrote: > i would configure apache to let php interpreter handle all kinds of > extensions ( http://httpd.apache.org/docs/2.0/mod/mod_mime.html#addhandler > ) > > even then u'll have go through all the steps pointed out by Ash. > the only advantage of thi

Re: [PHP] login to protected directory by php

2010-08-15 Thread kranthi
i would configure apache to let php interpreter handle all kinds of extensions ( http://httpd.apache.org/docs/2.0/mod/mod_mime.html#addhandler ) even then u'll have go through all the steps pointed out by Ash. the only advantage of this method is more user friendly URL -- PHP General Mailing Lis

Re: [PHP] login to protected directory by php

2010-08-15 Thread Ashley Sheridan
login processes are separate from each other. The .htaccess method is handled by Apache, completely apart from PHP. I believe it is possible, but is unreliable because of the way different browser/server combinations behave. Your best bet is to store these files outside of web route, and access th

[PHP] login to protected directory by php

2010-08-15 Thread Ali Asghar Toraby Parizy
all files (web pages, pictures, and exe files) and folders in a directory should be protected against anonymous users. I create an application with php and mysql for registered users. when a user registers it's information will be saved in database and its username and password will be added to .ht

Re: [PHP] login to protected directory by php

2010-08-13 Thread chris h
Based off what your saying my guess is that the request is not hitting your php script. Is the php script in the protected directory? If so what is it's file name and what url are you hitting for the test? Chris. On Fri, Aug 13, 2010 at 6:21 PM, Ali Asghar Toraby Parizy < aliasghar.tor...@gmail

[PHP] login to protected directory by php

2010-08-13 Thread Ali Asghar Toraby Parizy
Hi. I have a protected directory in my host. I have configured .htaccess successfully and it works prefect. Now I'm looking for a solution to login and logout by a php script. In my site I have a login page. In that page I set 'PHP_AUTH_USER' and ' PHP_AUTH_PW'. but when I try to open protected dir

Re: [PHP] Login using just cookies, bad idea?

2010-07-12 Thread Stuart Dallas
On 08/07/10 17:53, Michael Calkins wrote: I right now have a complete user login and registration system however it uses cookies when you login to store information. Is this a bad thing?$_COOKIE vs $_SESSION for login systems Encrypt the cookie, make sure you don't store the password in there

Re: [PHP] Login In script quesitons

2010-07-09 Thread Gary
Ashley & Richard I think I found the issue. In loginGlobals.php, the error was pointing to line 281, when the code stopped and 278. (I know most of the time this just means there is a missing bracket or semi-colon in the code), however, what I did is put my curser on link 281, backspaced to el

Re: [PHP] Login In script quesitons

2010-07-09 Thread Gary
"Ashley Sheridan" wrote in message news:1278706121.2295.5.ca...@localhost... > On Fri, 2010-07-09 at 16:04 -0400, Gary wrote: > >> ?> >> > > That bit of the code has a newline in it, which counts as output :p > > I've not looked over the rest yet, but see if that helps. > > Thanks, > Ash > http

Re: [PHP] Login In script quesitons

2010-07-09 Thread Ashley Sheridan
On Fri, 2010-07-09 at 16:04 -0400, Gary wrote: > ?> > http://www.ashleysheridan.co.uk

Re: [PHP] Login In script quesitons

2010-07-09 Thread Gary
"Ashley Sheridan" wrote in message news:1278705549.2295.4.ca...@localhost... > On Fri, 2010-07-09 at 15:58 -0400, Gary wrote: > >> "Ashley Sheridan" wrote in message >> news:1278705035.2295.2.ca...@localhost... >> > On Fri, 2010-07-09 at 15:43 -0400, Gary wrote: >> > >> >> "Richard Quadling" w

Re: [PHP] Login In script quesitons

2010-07-09 Thread Ashley Sheridan
On Fri, 2010-07-09 at 15:58 -0400, Gary wrote: > "Ashley Sheridan" wrote in message > news:1278705035.2295.2.ca...@localhost... > > On Fri, 2010-07-09 at 15:43 -0400, Gary wrote: > > > >> "Richard Quadling" wrote in message > >> news:aanlktilbmyedd8paky9dwgn0q7t6kem4zzutu_49u...@mail.gmail.com.

Re: [PHP] Login In script quesitons

2010-07-09 Thread Gary
"Ashley Sheridan" wrote in message news:1278705035.2295.2.ca...@localhost... > On Fri, 2010-07-09 at 15:43 -0400, Gary wrote: > >> "Richard Quadling" wrote in message >> news:aanlktilbmyedd8paky9dwgn0q7t6kem4zzutu_49u...@mail.gmail.com... >> > On 9 July 2010 16:42, Gary wrote: >> > [snip] >> >

Re: [PHP] Login In script quesitons

2010-07-09 Thread Ashley Sheridan
On Fri, 2010-07-09 at 15:43 -0400, Gary wrote: > "Richard Quadling" wrote in message > news:aanlktilbmyedd8paky9dwgn0q7t6kem4zzutu_49u...@mail.gmail.com... > > On 9 July 2010 16:42, Gary wrote: > > [snip] > > > > Take a look at https://code.google.com/p/loginsystem-rd/ > > > > Richard > > Tha

Re: [PHP] Login In script quesitons

2010-07-09 Thread Gary
"Richard Quadling" wrote in message news:aanlktilbmyedd8paky9dwgn0q7t6kem4zzutu_49u...@mail.gmail.com... > On 9 July 2010 16:42, Gary wrote: > [snip] > > Take a look at https://code.google.com/p/loginsystem-rd/ > Richard Thank you for your quick reply and the link. Since I see you are one of

Re: [PHP] Login In script quesitons

2010-07-09 Thread Richard Quadling
On 9 July 2010 16:42, Gary wrote: [snip] Take a look at https://code.google.com/p/loginsystem-rd/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Login In script quesitons

2010-07-09 Thread Gary
I have a log in script that is not working. It is taken from a lesson book that I read about a year or so ago so the lessons are not fresh in my mind. My questions are. 1. Why is this not working? 2. Does is look secure? 3. In researching the issue, I was reading some older threads that it was

Re: [PHP] Login using just cookies, bad idea?

2010-07-08 Thread Adam Richardson
On Thu, Jul 8, 2010 at 1:00 PM, Ashley Sheridan wrote: > On Thu, 2010-07-08 at 09:53 -0700, Michael Calkins wrote: > > > I right now have a complete user login and registration system however it > uses cookies when you login to store information. Is this a bad > thing?$_COOKIE vs $_SESSION for l

Re: [PHP] Login using just cookies, bad idea?

2010-07-08 Thread Ashley Sheridan
On Thu, 2010-07-08 at 09:53 -0700, Michael Calkins wrote: > I right now have a complete user login and registration system however it > uses cookies when you login to store information. Is this a bad > thing?$_COOKIE vs $_SESSION for login systems > > From,Michael calkinsmichaelcalk...@live.co

[PHP] Login using just cookies, bad idea?

2010-07-08 Thread Michael Calkins
I right now have a complete user login and registration system however it uses cookies when you login to store information. Is this a bad thing?$_COOKIE vs $_SESSION for login systems From,Michael calkinsmichaelcalk...@live.com425-239-9952 __

RE: [PHP] Login form + User level access

2010-06-30 Thread tedd
At 8:07 PM + 6/29/10, Carlos Sura wrote: Thank you for your answer Ted, You are right, well, I do have my login form, but what I do not understand is how to implement switch statement. switch ($level){ case 0: include ("admin.php"); break; case 1: include ("sales.php"); break; case

Re[4]: [PHP] Login form + User level access

2010-06-29 Thread Andre Polykanine
_elensule - Original message - From: Carlos Sura To: an...@oire.org Date: Tuesday, June 29, 2010, 11:13:08 PM Subject: [PHP] Login form + User level access Hello Andre, Thank you so much, Now I really get the idea. Oh, can I replace that adding inthe table of access_level a field called: '

RE: Re[2]: [PHP] Login form + User level access

2010-06-29 Thread Carlos Sura
an...@oire.org > CC: carlos_s...@hotmail.com; php-general@lists.php.net > Subject: Re[2]: [PHP] Login form + User level access > > Hello Carlos, > > What I forgot to add is the following: > I'd suggest you to put in the integers and not the strings >

Re[2]: [PHP] Login form + User level access

2010-06-29 Thread Andre Polykanine
Skype: Francophile; Wlm&MSN: arthaelon @ yandex.ru; Jabber: arthaelon @ jabber.org Yahoo! messenger: andre.polykanine; ICQ: 191749952 Twitter: m_elensule - Original message - From: Andre Polykanine To: Carlos Sura Date: Tuesday, June 29, 2010, 11:04:53 PM Subject: [PHP] Login form + User lev

RE: [PHP] Login form + User level access

2010-06-29 Thread Carlos Sura
the idea to get example codes, to base on it, asking : how do I get to london?, not how do I drive a car? Thanks. Carlos Sura. > Date: Tue, 29 Jun 2010 15:58:10 -0400 > To: carlos_s...@hotmail.com; php-general@lists.php.net > From: tedd.sperl...@gmail.com > Subject: Re: [PHP] Log

Re: [PHP] Login form + User level access

2010-06-29 Thread Andre Polykanine
from Ukraine, Andre Skype: Francophile; Wlm&MSN: arthaelon @ yandex.ru; Jabber: arthaelon @ jabber.org Yahoo! messenger: andre.polykanine; ICQ: 191749952 Twitter: m_elensule - Original message - From: Carlos Sura To: php-general@lists.php.net Date: Tuesday, June 29, 2010, 10:46:14 PM Subject

Re: [PHP] Login form + User level access

2010-06-29 Thread tedd
At 7:46 PM + 6/29/10, Carlos Sura wrote: Hello everyone. I have this question: I'm developing a login system but what I need is to do is access levels I mean, in my database I have this users: Admin Superusers sales purchase etc So, What I do basically need is, when a user from sales lo

[PHP] Login form + User level access

2010-06-29 Thread Carlos Sura
Hello everyone. I have this question: I'm developing a login system but what I need is to do is access levels I mean, in my database I have this users: Admin Superusers sales purchase etc So, What I do basically need is, when a user from sales log in.. I want him to see just the menu from

Re: [PHP] Login Script: mysql_num_rows(): supplied argument is not a valid MySQL result resource

2010-02-19 Thread David Hutto
--- On Fri, 2/19/10, Ashley Sheridan wrote: From: Ashley Sheridan Subject: Re: [PHP] Login Script: mysql_num_rows(): supplied argument is not a valid MySQL result resource To: "David Hutto" Cc: php-general@lists.php.net Date: Friday, February 19, 2010, 5:34 AM On Fri,

Re: [PHP] Login Script: mysql_num_rows(): supplied argument is not a valid MySQL result resource

2010-02-19 Thread Ashley Sheridan
On Fri, 2010-02-19 at 00:30 -0800, David Hutto wrote: > The following script is supposed to validate a username and password in a > mysql db. When entering the username and password of a preregistered user, I > get the following errors: > > Warning: mysql_num_rows(): supplied argument is not

[PHP] Login Script: mysql_num_rows(): supplied argument is not a valid MySQL result resource

2010-02-19 Thread David Hutto
The following script is supposed to validate a username and password in a mysql db.  When entering the username and password of a preregistered user, I get the following errors: Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /var/www/login.php on line 24

Re: [PHP] Login should not allow users to login if the application is logged in with the same login credentials

2009-08-27 Thread Phpster
On Aug 27, 2009, at 8:01 AM, hack988 hack988 wrote: Use Database Online table for user sessions. 2009/8/27 Balasubramanyam A : Hello, I've written a simple application, where users need to login to access the features of the application. I want to develop login system such that, i

RES: [PHP] Login should not allow users to login if the application is logged in with the same login credentials

2009-08-27 Thread Jônatas Zechim
eneral@lists.php.net Assunto: [PHP] Login should not allow users to login if the application is logged in with the same login credentials Hello, I've written a simple application, where users need to login to access the features of the application. I want to develop login system such that, if user

Re: [PHP] Login should not allow users to login if the application is logged in with the same login credentials

2009-08-27 Thread hack988 hack988
Use Database Online table for user sessions. 2009/8/27 Balasubramanyam A : > Hello, > > I've written a simple application, where users need to login to access the > features of the application. I want to develop login system such that, if > user is already logged in, the application should not all

[PHP] Login should not allow users to login if the application is logged in with the same login credentials

2009-08-27 Thread Balasubramanyam A
Hello, I've written a simple application, where users need to login to access the features of the application. I want to develop login system such that, if user is already logged in, the application should not allow the users to login with the same login credentials. How do I accomplish this? Reg

Re: [PHP] Login

2008-10-09 Thread Wolf
Shawn McKenzie <[EMAIL PROTECTED]> wrote: > Richard Heyes wrote: > >> Unless that was the business you were in ;) > > > > True enough, but what kind of business would that be...? :-) > > > > Rating poo, of course... It's a crappy job, but someone's got to do it... ;) -- PHP General Mai

Re: [PHP] Login

2008-10-09 Thread Shawn McKenzie
Richard Heyes wrote: >> Unless that was the business you were in ;) > > True enough, but what kind of business would that be...? :-) > Rating poo, of course... -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Login

2008-10-09 Thread Richard Heyes
> Unless that was the business you were in ;) True enough, but what kind of business would that be...? :-) -- Richard Heyes HTML5 Graphing for FF, Chrome, Opera and Safari: http://www.rgraph.org -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.

Re: [PHP] Login

2008-10-09 Thread Ashley Sheridan
On Thu, 2008-10-09 at 19:02 +0100, Richard Heyes wrote: > >> I'd like to take this back to the heart of this message and state that > >> redirecting malicious usage to ratemypoo seems like a perfectly delightful > >> means of security. > > > > Agreed, funniest thing I've heard all week! > > Howev

Re: [PHP] Login

2008-10-09 Thread Richard Heyes
>> I'd like to take this back to the heart of this message and state that >> redirecting malicious usage to ratemypoo seems like a perfectly delightful >> means of security. > > Agreed, funniest thing I've heard all week! However if you're wrong, you would have redirected a valid user to ratemypoo

Re: [PHP] Login

2008-10-09 Thread Tom Chubb
> > > > I'd like to take this back to the heart of this message and state that > redirecting malicious usage to ratemypoo seems like a perfectly delightful > means of security. > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > Agr

Re: [PHP] Login

2008-10-09 Thread Frank Stanovcak
"Wolf" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > >> Redirects make sense IMO. IIRC the Yahoo guidelines say not to >> redirect after a form POST, but unless you have a ka-jillion page >> views a second (or, "a lot"), then I don't think it's a concern. > > Wait, Yahell has gui

Re: [PHP] Login [0T]

2008-10-09 Thread Luke
Richard Heyes; php-general@lists.php.net; Bernhard Kohl > > Subject: Re: [PHP] Login > > > > On Wed, 2008-10-08 at 21:45 +0100, Stut wrote: > > > On 8 Oct 2008, at 21:44, Ashley Sheridan wrote: > > > > On Wed, 2008-10-08 at 16:33 -0400, Wolf wrote: &g

RE: [PHP] Login

2008-10-09 Thread Boyd, Todd M.
> -Original Message- > From: Jason Pruim [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 09, 2008 6:01 AM > To: Stut > Cc: [EMAIL PROTECTED]; PHP LIST > Subject: Re: [PHP] Login > > As someone who works in the advertising and marketing field, I can say > I

RE: [PHP] Login [0T]

2008-10-09 Thread Boyd, Todd M.
> -Original Message- > From: Ashley Sheridan [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 08, 2008 4:05 PM > To: Stut > Cc: Wolf; Richard Heyes; php-general@lists.php.net; Bernhard Kohl > Subject: Re: [PHP] Login > > On Wed, 2008-10-08 at 21:45 +0100, Stut

Re: [PHP] Login

2008-10-09 Thread Eric Butera
On Thu, Oct 9, 2008 at 8:35 AM, Nathan Rixham <[EMAIL PROTECTED]> wrote: > Jason Pruim wrote: >> >> On Oct 8, 2008, at 5:48 PM, Stut wrote: >> >>> On 8 Oct 2008, at 22:32, Ashley Sheridan wrote: On Wed, 2008-10-08 at 22:15 +0100, Stut wrote: > >>> Obviously, I'm a programmer, so

Re: [PHP] Login

2008-10-09 Thread Nathan Rixham
Jason Pruim wrote: On Oct 8, 2008, at 5:48 PM, Stut wrote: On 8 Oct 2008, at 22:32, Ashley Sheridan wrote: On Wed, 2008-10-08 at 22:15 +0100, Stut wrote: Obviously, I'm a programmer, so I probably don't fall into the 'normal' category for advertising ;) You may think that but I've neve

Re: [PHP] Login

2008-10-09 Thread Jason Pruim
On Oct 8, 2008, at 5:48 PM, Stut wrote: On 8 Oct 2008, at 22:32, Ashley Sheridan wrote: On Wed, 2008-10-08 at 22:15 +0100, Stut wrote: Obviously, I'm a programmer, so I probably don't fall into the 'normal' category for advertising ;) You may think that but I've never come across any

Re: [PHP] Login

2008-10-08 Thread Stut
On 8 Oct 2008, at 22:32, Ashley Sheridan wrote: On Wed, 2008-10-08 at 22:15 +0100, Stut wrote: I don't disagree that it's not the best model, but it is the best paying I have to disagree. Each and every time I've come across this, I've gone elsewhere. The model doesn't work as far as I can te

Re: [PHP] Login

2008-10-08 Thread Ashley Sheridan
On Wed, 2008-10-08 at 22:15 +0100, Stut wrote: > I don't disagree that it's not the best model, but it is the best > paying I have to disagree. Each and every time I've come across this, I've gone elsewhere. The model doesn't work as far as I can tell. I think the problem is the people who creat

Re: [PHP] Login

2008-10-08 Thread Stut
On 8 Oct 2008, at 22:05, Ashley Sheridan wrote: On Wed, 2008-10-08 at 21:45 +0100, Stut wrote: On 8 Oct 2008, at 21:44, Ashley Sheridan wrote: The only redirects that have p!ssed me off before are those ones that big sites put in to make room for their adverts. On more than one occassion I've

Re: [PHP] Login

2008-10-08 Thread Ashley Sheridan
On Wed, 2008-10-08 at 21:45 +0100, Stut wrote: > On 8 Oct 2008, at 21:44, Ashley Sheridan wrote: > > On Wed, 2008-10-08 at 16:33 -0400, Wolf wrote: > >> > >>> Redirects make sense IMO. IIRC the Yahoo guidelines say not to > >>> redirect after a form POST, but unless you have a ka-jillion page > >>

Re: [PHP] Login

2008-10-08 Thread Stut
On 8 Oct 2008, at 21:44, Ashley Sheridan wrote: On Wed, 2008-10-08 at 16:33 -0400, Wolf wrote: Redirects make sense IMO. IIRC the Yahoo guidelines say not to redirect after a form POST, but unless you have a ka-jillion page views a second (or, "a lot"), then I don't think it's a concern. Wai

Re: [PHP] Login

2008-10-08 Thread Ashley Sheridan
On Wed, 2008-10-08 at 16:33 -0400, Wolf wrote: > > > Redirects make sense IMO. IIRC the Yahoo guidelines say not to > > redirect after a form POST, but unless you have a ka-jillion page > > views a second (or, "a lot"), then I don't think it's a concern. > > Wait, Yahell has guidelines?!?!? > >

Re: [PHP] Login

2008-10-08 Thread Wolf
> Redirects make sense IMO. IIRC the Yahoo guidelines say not to > redirect after a form POST, but unless you have a ka-jillion page > views a second (or, "a lot"), then I don't think it's a concern. Wait, Yahell has guidelines?!?!? You always have to look at the User Experience. You don't want

Re: [PHP] Login

2008-10-08 Thread Richard Heyes
> I would recommend using the include method. Redirects should always >> be second choice, because they are just evil. > > In this case I would disagree. On successful login it's normal to redirect > to a useful page rather than just display a page that says "congratulations, > you're a real user".

Re: [PHP] Login

2008-10-08 Thread Ashley Sheridan
On Wed, 2008-10-08 at 20:02 +0100, Stut wrote: > On 8 Oct 2008, at 19:52, Bernhard Kohl wrote: > > > # I would recommend using the include method. Redirects should always > > be second choice, because they are just evil. > > In this case I would disagree. On successful login it's normal to > re

Re: [PHP] Login

2008-10-08 Thread Stut
On 8 Oct 2008, at 19:52, Bernhard Kohl wrote: In this case I would disagree. On successful login it's normal to redirect to a useful page rather than just display a page that says "congratulations, you're a real user". In the case of an unsuccessful login why would you need to include ano

Re: [PHP] Login

2008-10-08 Thread Ashley Sheridan
On Wed, 2008-10-08 at 11:52 -0700, Bernhard Kohl wrote: > # I would recommend using the include method. Redirects should always > be second choice, because they are just evil. > # Example code below > $password = md5('swordfish'); > $user = 'Trucker Joe'; > if ($_POST['user'] == $user && md5($_POS

Re: [PHP] Login

2008-10-08 Thread Bernhard Kohl
http://us.php.net/manual/en/function.include.php # http://en.wikipedia.org/wiki/Code_injection#PHP_Injection ?> -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Login

2008-10-07 Thread Nilesh Govindrajan
On Wednesday 08 October 2008 06:14:33 am Terry J Daichendt wrote: > I want to open a page if a login is correct and another if not. What is the > function to open a page in PHP? Can you show me a simple example of the > syntax? There is no such function. You have many options like redirecting a us

Re: [PHP] Login

2008-10-07 Thread Nilesh Govindrajan
There is no such function! You have to write the code. On Wed, Oct 8, 2008 at 6:14 AM, Terry J Daichendt <[EMAIL PROTECTED]>wrote: > I want to open a page if a login is correct and another if not. What is the > function to open a page in PHP? Can you show me a simple example of the > syntax? > >

Re: [PHP] Login

2008-10-07 Thread Kyle Terry
You can just use a header redirect. For example: if you are at login.php and the user is authorized, you could use if($auth === true) { header("Location: authed_page.php"); } else { header("Location: denied.php"); } On Oct 7, 2008, at 5:44 PM, "Terry J Daichendt" <[EMAIL PROTECTED]> wrote:

Re: [PHP] Login

2008-10-07 Thread Micah Gersten
What do you mean by open? You can redirect to a new page: http://us.php.net/header or You can include a file: http://us.php.net/include/ Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com Terry J Daichendt wrote: > I want to open a page if a login is correct and

[PHP] Login

2008-10-07 Thread Terry J Daichendt
I want to open a page if a login is correct and another if not. What is the function to open a page in PHP? Can you show me a simple example of the syntax? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Login without cookies enabled help

2008-07-15 Thread Thiago H. Pojda
>Yes, again, STFW before posting here. > >Google "PHPSESSID". > Call to undefined function Google(); > > -- > > > :) -- Thiago Henrique Pojda

Re: [PHP] Login without cookies enabled help

2008-07-15 Thread Daniel Brown
On Tue, Jul 15, 2008 at 10:15 AM, Shelley <[EMAIL PROTECTED]> wrote: > Well, as I said the cookies are disabled at the clients. > > Anybody any opinions? Yes, again, STFW before posting here. Google "PHPSESSID". -- Dedicated Servers - Intel 2.4GHz w/2TB bandwidth/mo. starting at just $

Re: [PHP] Login without cookies enabled help

2008-07-15 Thread Shelley
Well, as I said the cookies are disabled at the clients. Anybody any opinions? On Tue, Jul 15, 2008 at 7:23 PM, Thijs Lensselink <[EMAIL PROTECTED]> wrote: > Quoting Shelley <[EMAIL PROTECTED]>: > > Hi all, >> >> What is your way to organize user login without Client Cookies being >> disabled?

Re: [PHP] Login without cookies enabled help

2008-07-15 Thread php
[quote] On Tue , Thijs Lensselink [EMAIL PROTECTED] sent: Quoting Shelley <[EMAIL PROTECTED]>: > Hi all, > > What is your way to organize user login without Client Cookies being > disabled? > > Sample code will be appreciated. > > Waiting for your reply... > > -- > Regards, > Sh

Re: [PHP] Login without cookies enabled help

2008-07-15 Thread Thijs Lensselink
Quoting Shelley <[EMAIL PROTECTED]>: Hi all, What is your way to organize user login without Client Cookies being disabled? Sample code will be appreciated. Waiting for your reply... -- Regards, Shelley You can use sessions to store data on the server instead of the client. http://nl

[PHP] Login without cookies enabled help

2008-07-15 Thread Shelley
Hi all, What is your way to organize user login without Client Cookies being disabled? Sample code will be appreciated. Waiting for your reply... -- Regards, Shelley

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-21 Thread Tim Thorburn
Wolf wrote: IMHO, you should be testing this long before taking it to the customer and having another failure to show off. Personally, 2 failures is good reason NOT to purchase someone's services... Wolf Yes, I'm well aware of this - the point which you've continually failed to realize is tha

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-20 Thread tedd
At 9:32 PM +0200 5/19/08, Per Jessen wrote: Wolf wrote: >and IE has always been more stringent in-so-far as displaying things that match up to THEIR standards instead of industry or fly-by-your-seat coding (accidentally leaving off a closing tag) then Mozilla and Firefox have historically been

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-20 Thread Eric Butera
On Mon, May 19, 2008 at 4:03 PM, Richard Heyes <[EMAIL PROTECTED]> wrote: > Since when has that mattered? :-) :-) to you too. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] Semi-OT: PHP Login with client security

2008-05-20 Thread Wolf
008 3:20 PM To: php-general@lists.php.net Subject: Re: [PHP] Semi-OT: PHP Login with client security robert wrote: > > On May 18, 2008, at 10:14 PM, Tim Thorburn wrote: > >> Hi all, >> >> Having a slight problem with a demo I gave at a clients last week - >> l

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread robert
On May 19, 2008, at 12:20 PM, Tim Thorburn wrote: robert wrote: On May 18, 2008, at 10:14 PM, Tim Thorburn wrote: Hi all, Having a slight problem with a demo I gave at a clients last week - looking for a little advise. Part of my demo involved a password protected area - the simplifie

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Wolf
It sounds like your code is hokey, since IE is more stringent then other browsers, the code looks to be at fault. What browsers did you test this with before taking it to the client? Firewalls shouldn't be any type of issue at all in this case, unless your browser is trying to redirect to an

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Wolf
--- Per Jessen <[EMAIL PROTECTED]> wrote: > Wolf wrote: > > > Per Jessen <[EMAIL PROTECTED]> wrote: > >> Wolf wrote: > >> > >>> ... since IE is more stringent then other browsers ... > >> You are either using a very unusual IE or you are on another planet. > >> > > > > Nope IE and Opera

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Richard Heyes
Robert Cummings wrote: On Mon, 2008-05-19 at 21:03 +0100, Richard Heyes wrote: Because it is RFC. Since when has that mattered? :-) Always... unless you're one of the ignorant masses ;) Whatever works... :-) -- Richard Heyes Employ me http://www.phpgu

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Robert Cummings
On Mon, 2008-05-19 at 21:03 +0100, Richard Heyes wrote: > > Because it is RFC. > > Since when has that mattered? :-) Always... unless you're one of the ignorant masses ;) Cheers, Rob. -- http://www.interjinn.com Application and Templating Framework for PHP -- PHP General Mailing List (http:

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Richard Heyes
Because it is RFC. Since when has that mattered? :-) -- Richard Heyes Employ me http://www.phpguru.org/cv ++ | Access SSH with a Windows mapped drive | |http://www.phpguru.org/sftpdrive| +---

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread David Giragosian
On 5/19/08, Tim Thorburn <[EMAIL PROTECTED]> wrote: > Wolf wrote: > > Tim Thorburn <[EMAIL PROTECTED]> wrote: > > > > > Hi all, > > > > > > Having a slight problem with a demo I gave at a clients last week - > looking for a little advise. Part of my demo involved a password protected > area -

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Tim Thorburn
robert wrote: On May 18, 2008, at 10:14 PM, Tim Thorburn wrote: Hi all, Having a slight problem with a demo I gave at a clients last week - looking for a little advise. Part of my demo involved a password protected area - the simplified process is: client enters password on login page > i

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Tim Thorburn
Wolf wrote: Tim Thorburn <[EMAIL PROTECTED]> wrote: Hi all, Having a slight problem with a demo I gave at a clients last week - looking for a little advise. Part of my demo involved a password protected area - the simplified process is: client enters password on login page > if logi

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Per Jessen
Wolf wrote: > Per Jessen <[EMAIL PROTECTED]> wrote: >> Wolf wrote: >> >>> ... since IE is more stringent then other browsers ... >> You are either using a very unusual IE or you are on another planet. >> > > Nope IE and Opera both wait for full page before displaying (while > firefox disp

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Wolf
Per Jessen <[EMAIL PROTECTED]> wrote: > Wolf wrote: > > > ... since IE is more stringent then other browsers ... > > You are either using a very unusual IE or you are on another planet. > Nope IE and Opera both wait for full page before displaying (while firefox displays as output) and

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Eric Butera
On Mon, May 19, 2008 at 12:52 PM, Richard Heyes <[EMAIL PROTECTED]> wrote: >> You should _always_ use an absolute URL in a redirect. I know it quite >> often works with a relative too. > > Why? > > -- > Richard Heyes > >Employ me >http://www.phpguru.org/cv > >

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Richard Heyes
You should _always_ use an absolute URL in a redirect. I know it quite often works with a relative too. Why? -- Richard Heyes Employ me http://www.phpguru.org/cv ++ | Access SSH with a Windows mapped drive | |h

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Per Jessen
robert wrote: > try to use a full url instead of relative. e.g. > > header('location: thankyou.php'); > > vs. > > header('location: http://www.mysite.com/thankyou.php'); You should _always_ use an absolute URL in a redirect. I know it quite often works with a relative too. /Per Jessen, Züri

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread robert
On May 18, 2008, at 10:14 PM, Tim Thorburn wrote: Hi all, Having a slight problem with a demo I gave at a clients last week - looking for a little advise. Part of my demo involved a password protected area - the simplified process is: client enters password on login page > if login/pass

Re: [PHP] Semi-OT: PHP Login with client security

2008-05-19 Thread Per Jessen
> Tim Thorburn <[EMAIL PROTECTED]> wrote: >> Hi all, >> >> Having a slight problem with a demo I gave at a clients last week - >> looking for a little advise. Part of my demo involved a password >> protected area - the simplified process is: client enters password on >> login page > if login

  1   2   3   4   >