Re: login
| From: | Jason Wong | Date: | Fri, 20 Dec 2002 14:47:43 +0000 |
| Subject: | Re: login | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-128995@lists.php.net to get a copy of this message | ||
On Friday 20 December 2002 22:20, Edward Peloke wrote:
> Ok,
> Newbie Question.....
> I know have a login and registration page on my website. What is the best
> way to check to see if the users have logged in before they access the
> other pages? SHould I add to each of the other url's ?clientid='' and if
> it is an empty string I know they haven't logged in?
Use sessions. After you've validated their username and password, set a
session variable to show that they're logged in. Storing the login status in
the URL is an extremely bad idea. What's to stop people who haven't logged in
from adding/setting their own clientid?
--
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
/*
I got vision, and the rest of the world wears bifocals.
-- Butch Cassidy
*/