Reply to thread

Message

<blockquote data-quote="Ecko" data-source="post: 370386" data-attributes="member: 24874">Your script allows for login if following two conditions are met:User/pass fields are not empty Username is the same as the passwordIf this is where you are storing admin information:[php]$user[&quot;admin1&quot;] = &quot;password&quot;;[/php]Then change:[php]elseif ($user[$_POST['username']] != $_POST['password'])[/php]To:[php]elseif ($user[&quot;admin1&quot;] != $_POST['password'])[/php]In my opinion it is better if you store admins in an array:[php]$VALID_USERS = array(&nbsp; &nbsp; &nbsp; &nbsp; 'devbest' =&gt; 'demo123',&nbsp; &nbsp; &nbsp; &nbsp; 'ecko' =&gt; 'adminpass',&nbsp; &nbsp; );[/php]Then check password and set cookie:[php]&nbsp; if($act == 'login' &amp;&amp; $_POST['form_sent'] == '1'){&nbsp; &nbsp; &nbsp; &nbsp; $user = stripslashes(trim($_POST['login_user']));&nbsp; &nbsp; &nbsp; &nbsp; $pass = stripslashes(trim($_POST['login_pass']));&nbsp; &nbsp; &nbsp; &nbsp; foreach($VALID_USERS as $u =&gt; $p){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(strtolower($u) == strtolower($user) &amp;&amp; strtolower($p) == strtolower($pass)){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; setcookie('security', serialize(array($u, $p)), time() + 31536000, '/', '', 0);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header('Location: security.php');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; message('Invalid username or password', 'Login Error');&nbsp; &nbsp; }elseif($act == 'logout'){&nbsp; &nbsp; &nbsp; &nbsp; setcookie('security', serialize(array('', '')), time() - 1, '/', '', 0);&nbsp; &nbsp; &nbsp; &nbsp; header('Location: security.php');&nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; }[/php]Then you can just check cookie to see if they are logged in.</blockquote>

[QUOTE="Ecko, post: 370386, member: 24874"] Your script allows for login if following two conditions are met: User/pass fields are not empty Username is the same as the password If this is where you are storing admin information: [php]$user["admin1"] = "password";[/php] Then change: [php]elseif ($user[$_POST['username']] != $_POST['password'])[/php] To: [php]elseif ($user["admin1"] != $_POST['password'])[/php] In my opinion it is better if you store admins in an array: [php]$VALID_USERS = array( 'devbest' => 'demo123', 'ecko' => 'adminpass', );[/php] Then check password and set cookie: [php] if($act == 'login' && $_POST['form_sent'] == '1'){ $user = stripslashes(trim($_POST['login_user'])); $pass = stripslashes(trim($_POST['login_pass'])); foreach($VALID_USERS as $u => $p){ if(strtolower($u) == strtolower($user) && strtolower($p) == strtolower($pass)){ setcookie('security', serialize(array($u, $p)), time() + 31536000, '/', '', 0); header('Location: security.php'); exit; } } message('Invalid username or password', 'Login Error'); }elseif($act == 'logout'){ setcookie('security', serialize(array('', '')), time() - 1, '/', '', 0); header('Location: security.php'); exit; }[/php] Then you can just check cookie to see if they are logged in. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members