note 29856 rejected from ref.session by betz
| From: | betz@php.net | Date: | Wed, 26 Feb 2003 22:38:33 +0000 |
| Subject: | note 29856 rejected from ref.session by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-44579@lists.php.net to get a copy of this message | ||
I can't get it to work:
LOGIN PAGE:
<html>
<head>
<title>SETUP PAGE</title>
</head>
<body>
<form action="RD_Login.php" method="post">
<table cellspacing="2" cellpadding="2" border="1">
<tr>
<td>Username</td>
<td><input type="text" name="username"></td>
</tr>
<tr>
<td>Password</td>
<td><input type="text" name="password"></td>
</tr>
<tr>
<td colspan="2" align="center"><input type="submit"
name="Submit" value="Log In"></td>
</tr>
<?
if (isset($_GET['login'])) {
if ($_GET['login'] == "Error") {
print ("<tr>");
print (" <td colspan='2' align='center'>LOG-IN
MISLUKT</td>");
print ("</tr>");
}
}
?>
</table>
</form>
</body>
</html>
RECEIVING PAGE:
<?
// CONNECT TO DB
// SETUP MYSQL CONNECTION: "HOST","USER","PASSWORD"
$service = mysql_connect("localhost", "root", "adminroot") or
die("Could not connect to mysql service.");
// SETUP DATABASE CONNECTION: "LOGIN"
mysql_select_db("login",$service) or die("Could not select database.");
// SQL STATEMENT
$sqlString = "SELECT userID,departement ";
$sqlString .= "FROM Users,Departements ";
$sqlString .= "WHERE Users.departementID=Departements.departementID ";
$sqlString .= "AND username='".$_POST['username']."' ";
$sqlString .= "AND password='".$_POST['password']."' ";
$sqlString .= "ORDER BY departement";
// EXECTUTE SQL ON DATABASE
$result = mysql_query($sqlString) or die ("Query failed");
// DISCONNECT
mysql_close($service);
?>
<?
// CHECK IF THERE ARE RECORDS
if ($rs = mysql_fetch_array($result, MYSQL_BOTH)) { // IF THERE ARE RECORDS, SHOW THEM
$_SESSION['userID'] = $rs[0];
$_SESSION['departement'] = $rs[1];
} else { // IF THERE WERE NO RECORDS TO BEGIN WITH, TELL ME
header("Location: ./index.php?login=Error");
} // END IF
mysql_free_result($result);
?>
<?
if ($_SESSION['departement'] == "administrator") {
header("Location: ./Administration/Administration.php");
} else {
header("Location: ./Administration/Departement.php");
}
?>
FOLLOWING PAGE (e.g. Department.php):
<html>
<head>
<title>Untitled</title>
</head>
<body>
DEPARTEMENT: <?= $_SESSION['departement']; ?>
</body>
</html>
It won't work, has something to do with header("Location: url")...