chapter 11, login

koen · May 30th, 2004, 09:10 AM

Hi,

Who has the login functionality as explained in chapter 11 working?

My index.php does not recognize me as a 'logged_user', even after I logged in.

1) index.php
session file is created, no username password available
unlogged_user.php is included.

2) user_login.php opens
a 2nd session file is created no username password available

3) username/password submitted in user_login.php
a 3rd session file is created, now containing username password data:

user_logged|s:8:"koen";user_password|s:5:"secret";

now, I am redirected to index.php (a 4th session file is created, without username/password data). Index.php does not (!) (AARRRGGHHHH! :() recognize any username password data and unlogged_user.php is included again!

Who can help me with this?

Kind regards,

Koen

PS. Can I download the code samples from chapter 11 from anywhere?

koen · May 30th, 2004, 09:29 AM

I found the place to download the code.
Tried it with the downloaded code.
Same problem!
Does this code work for anyone?!?!

All help is appreciated!

Koen

Snib · May 31st, 2004, 09:35 AM

My guess is that register_globals is off (which is probably a good thing). Instead of referencing to the session variables like $name try using a superglobal like $_SESSION['name'].

Let me know if this solves your problem.

Snib

<><

richard.york · May 31st, 2004, 12:41 PM

Ok, register_globals doesn't have anything to do with the problem.

My guess is the page is relying on cookies to pass the session id and you probably don't have cookies enabled. In most modern browsers cookies are turned off by default.

Code:

          header ("Refresh: 5; URL=" . $_POST['redirect'] . "&sid=".session_id());
          echo "You are being redirected to your original page request!<br>";
          echo "(If your browser doesn't support this, <a href=\"" .
               $_POST['redirect']. "&sid=".session_id()."\">click here</a>)";

The session id is required to tie the session data to the user, if the id is not passed a new session will be created every time. By default this is done with cookies, every time a call to session_start is made a cookie is output containing the session id. Otherwise the session id needs to be hard coded into the page with a query string or hidden input field.

Such as:
echo "<a href='index.php?sid='".session_id()."'>Click here</a><br />\n";

Or:
echo "<input type='hidden' name='sid' value='".session_id()."' />";

Try that and let me know how it goes!

HTH!

Regards,
Rich

::::::::::::::::::::::::::::::::::::::::::
The Spicy Peanut Project
http://www.spicypeanut.net
::::::::::::::::::::::::::::::::::::::::::