Re: Re: RE:[PHP] login scripts not secure?? help!
| From: | Scott Fletcher | Date: | Tue, 23 Mar 2004 16:10:52 +0000 |
| Subject: | Re: Re: RE:[PHP] login scripts not secure?? help! | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-181276@lists.php.net to get a copy of this message | ||
Then do what I did, the script below is only an example..
--snip--
<?
if ($_REQUEST['dw'] == 0) {
session_start()
$_SESSION['username'] = ****; //Wherever you got the userid from
$_SESSION['password'] = ****; //Wherever you got the password from
//if successful
header("Location: *****");
} else if ($_REQUEST['dw'] == 1) {
//blah blah blah
}
?>
<form **** method="POST" action="page1.php?dw=0">
<a href="page1.php?dw=1">page1</a>
--snip--
That way, no one see the hidden code in html stuff like <a href=''> or <form
*** action=''> for example. Hope that will give you an idea... :-)
FletchSOD
"Andy B" <aborka1@wmis.net> wrote in message
news:007501c410ea$372b6900$34c66dd8@andy...
> [snip]
> You can use the HTTP Authentication instead for username and password.
> [/snip]
>
> no i cant this time because the people want the login form to follow their
> color setup and stuff and with www-authenticate: box you cant do that...so
> for this project its out of the question...