Reply to thread

Message

<blockquote data-quote="reinoreiska" data-source="post: 370380" data-attributes="member: 67146">Hi, i'am trying to make a login script without mysql and i am using this code on the security.php file that i found on this site.&lt;?phpsession_start();&nbsp;$user[&quot;admin1&quot;] = &quot;password&quot;;$user[&quot;admin2&quot;] = &quot;password&quot;;$user[&quot;admin3&quot;] = &quot;password&quot;;&nbsp;if (!isset($_SESSION['logged_in'])){&nbsp;echo '&lt;h1&gt;Login&lt;/h1&gt;';&nbsp;if ($_SERVER['REQUEST_METHOD'] == 'POST')&nbsp;{&nbsp;if (empty($_POST['username']) || empty($_POST['password']))&nbsp;{&nbsp;echo '&lt;span style=&quot;color:red; font-weight: bold&quot;&gt;Please fill in all fields!&lt;/span&gt;';&nbsp;}&nbsp;elseif ($user[$_POST['username']] != $_POST['password'])&nbsp;{&nbsp;echo '&lt;span style=&quot;color:red; font-weight: bold&quot;&gt;Your username/password is wrong!&lt;/span&gt;';&nbsp;}&nbsp;else&nbsp;{&nbsp;header(&quot;Refresh: 1&quot;);&nbsp;$_SESSION['ingelogd'] = true;&nbsp;echo '&lt;span style=&quot;color:green; font-weight: bold&quot;&gt;You are now logged in!&lt;/span&gt;';&nbsp;}&nbsp;}&nbsp;else&nbsp;{&nbsp;exit('You need to log-in to view this page.&lt;br /&gt;&lt;br /&gt;&nbsp;&lt;form method=&quot;POST&quot; action=&quot;&quot;&gt;&lt;p&gt;&nbsp;Username:&lt;br /&gt;&nbsp;&lt;input type=&quot;text&quot; name=&quot;username&quot; /&gt;&lt;br /&gt;&lt;br /&gt;&nbsp;Password:&lt;br /&gt;&nbsp;&lt;input type=&quot;password&quot; name=&quot;password&quot; /&gt;&lt;br /&gt;&lt;br /&gt;&nbsp;&lt;input type=&quot;submit&quot; value=&quot;Login&quot; /&gt; &lt;input type=&quot;reset&quot; value=&quot;Empty fields&quot; /&gt;&nbsp;&lt;/form&gt;');&nbsp;}}?&gt;but everytime i log in with wrong account details it still lets me to view the contet, so how do i fix it ?</blockquote>

[QUOTE="reinoreiska, post: 370380, member: 67146"] Hi, i'am trying to make a login script without mysql and i am using this code on the security.php file that i found on this site. <?php session_start(); $user["admin1"] = "password"; $user["admin2"] = "password"; $user["admin3"] = "password"; if (!isset($_SESSION['logged_in'])) { echo '<h1>Login</h1>'; if ($_SERVER['REQUEST_METHOD'] == 'POST') { if (empty($_POST['username']) || empty($_POST['password'])) { echo 'Please fill in all fields!'; } elseif ($user[$_POST['username']] != $_POST['password']) { echo 'Your username/password is wrong!'; } else { header("Refresh: 1"); $_SESSION['ingelogd'] = true; echo 'You are now logged in!'; } } else { exit('You need to log-in to view this page. <form method="POST" action=""> Username: <input type="text" name="username" /> Password: <input type="password" name="password" /> <input type="submit" value="Login" /> <input type="reset" value="Empty fields" /> </form>'); } } ?> but everytime i log in with wrong account details it still lets me to view the contet, so how do i fix it ? [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members