Re: Login Script

"Brian Krausz" <brian@nerdlife.net> wrote in message news:20040719195920.87535.qmail@pb1.pair.com... > [snip] > a. do not reply off-list unless asked, your question may not receive the > attention it needs > [/snip] > Sorry, I got the email before the board post so I assumed you were only > replying off-list. > > [snip] > 2. You do know basic PHP, correct? Create a page that accepts a username > and password. Have the un and pw checked against the db. If it is good, > set a cookie and check for the cookie with each page, if not redirect to > the proper location. > [/snip] > My 2 main concern are security and user-friendlyness. I would like > anyone (regardless of cookies being allowed or not) to be able to use my > service, but I would still like it to be secure. > > But I guess I'll try making my own script...worth a shot. Hi Brian, if you want to be independent of the user's browser cookie settings you have to pass the session id from page to page via POST (e.g. as a hidden field in a form) or GET: <a href="page2.php<?php= SID ?>">link</a> I would recommend searching the mailing list archives. You will find LOADS of useful information on sessions. Regards, Torsten Roehr