How to secure pages to require login to access them

Changed thread title to better describe the problem (did you know that threads whose titles that do not follow the Posting Guidelines actually get FEWER responses?).

Heya, silmana.

How you implement this is largely up to you. The generally-accepted way to do this is to put some kind of logged-in indicator in the _SESSION, which you would then check for when loading a restricted page.

For example, you might set $_SESSION['logged_in'] = true when the User logs in.

Then, when loading a restricted page, you can add this code at the top:

Hi

For the security purpose you can use md5 function.

md5 is an on way encryption algo, Before storing data into database encrypt it using md5, and at the time of login validate it.

Changed thread title to better describe the problem (did you know that threads whose titles that do not follow the Posting Guidelines actually get FEWER responses?).

Heya, silmana.

How you implement this is largely up to you. The generally-accepted way to do this is to put some kind of logged-in indicator in the _SESSION, which you would then check for when loading a restricted page.

For example, you might set $_SESSION['logged_in'] = true when the User logs in.

Then, when loading a restricted page, you can add this code at the top:

Expand|Select|Wrap|Line Numbers

1. session_start();
2. if(empty($_SESSION['logged_in']))
3. {
4.     header('Location: http://' . $_SERVER['HTTP_HOST'] . '/login.php');
5.     exit;
6. }
7.  

i dont know where you mean i should put this code, do you mean in the welcome page or? cuz i tried and it dosent work, cant you do for me a "demo" page with the correct full scripts for the private login page?
thanks.

Heya, silmana.

You put that code at the very top of any page that you want to secure. For example:

sorry dosent work.

here is the site that i want to secure
the code for the site : pliz show me how to do, reply back with codes.
thanks

Heya, silmana.

Please use CODE tags when posting source code. See the REPLY GUIDELINES on the right side of the page next time you post.

Instead of checking for isset() use empty() instead. isset() will return true when $_SESSION['sess_user'] is false, which is probably not desirable.

Which problem are you having?

Are you unable to view the page when you are logged in?
Or are you able to view the page even if you are not logged in?

okey did that now its working but, how do i know that when the user logs in he has a private page is there anything that i can add , cuz i want that all the user will only see the same design but not the same information, ? could someone help me with that could i get som script for that

Heya, silmana.

So what you're trying to do is to show one set of content if the User is logged in, but a different set of content if he is not?

yeah you know like the regular communitys, you logg in and have your profile(private site, info) but the desing is the same for all the users, can you help me with that? send me the codes please.

Heya, Silmana.

Ok. Instead of redirecting to the login page if the User is not logged in, you simply not show certain content.

For example:

Hi pbmods;

thanks for ur previous info.It is useful for me too.
but if my case is like one administrator is control all the user in the application..user got many level.different level perform different task.

If i am user like data entry..so i can go to all the page relate with my data entry limitation.So i can't go to other page like finance page..How to i block it?

Thanks

Heya, Wish.

The simplest way to do this would be to set up access groups, and then only allow members of a particular group to access each page.

For example, you might create a 'Data Entry' group, and then you could put code similar to this at the top of every data entry page:
When the User logs in, you would look up any and all groups that the User is a member of and then set them as keys to $_SESSION['groups']:

Hello,
I have similar issue as Silmana had. I am able to view the logged-in information directly by entering in the url when i am not logged-in. Please help me with code.
Below is my Logged-in Page. This is where i have a welcome message and the employee name then i have a bunch of links that open on new tab. This is strictly for logged-in users only. How can i achieve the following if someone copies or bookmarks a link that is on the Logged-in page it should redirect them to the login page first.