RE: [PHP] PHP authenticating and session management
| From: | Jaxon | Date: | Fri, 22 Jun 2001 13:32:19 +0000 |
| Subject: | RE: [PHP] PHP authenticating and session management | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-54876@lists.php.net to get a copy of this message | ||
Does this depend on cookies?
regards,
jaxon
> -----Original Message-----
> From: Style|warrioR [mailto:stylewarrior@hotmail.com]
> Sent: Friday, June 22, 2001 5:09 AM
> To: php-general@lists.php.net
> Subject: Re: [PHP] PHP authenticating and session management
>
>
> I'm not quite sure if this is the perfect way cause I'm pretty new to this
> session stuff, too.....
> but my version looks like this:
>
> [login.php]
> a form with username and password field.
> submit --> auth.php
>
>
> [auth.php]
> check if username and password are ok (from a text file or your mysql
> database) [yes|no]
> [no] -> echo "bad login or password."; exit;
> [yes] -> start a session, save username and password in session vars,
> redirect to userpage
>
>
> lets say your userpages look like "aUsername_blah.php"
>
>
> ["aUsername_blah.php"]
> include a script on every userpage that checks if login and password are
> correct [yes|no]
> [no] -> redirect to login.php
> [yes] -> display page
>
>
> comments appreciated :)
> .andi
>
>
>
>
>
>
> "Arash Dejkam" <arashdejkam@yahoo.com> schrieb in im Newsbeitrag:
> 9guhbf$msi$1@w153.z064000151.sjc-ca.dsl.cnc.net...
> > Hi,
> >
> > I want to use PHP session manager but I have some problems,
> >
> > I want the session start in a login page so I do this for example:
> >
> > after authenticating...
> > session_start();
> > session_register("username");
> >
> > then I want the user to be able to see his own pages, what do I
> have to do
> > in those pages?
> >
> > simply check $username and bring up the user's page ? but this makes it
> > possible for any hacker to send a cookie with username and see
> that page.
> I
> > know that PHP stores a unique random number for each session
> but how can I
> > check that it matches with the number in the cookie.
> >
> > help me please I'm really confused !
> >
> > Thanks
> >
> > Arash Dejkam
> >
> >
> >
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail: php-list-admin@lists.php.net
> >
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net
>
>