Reply to thread

Message

<blockquote data-quote="BIOS" data-source="post: 370394" data-attributes="member: 15674">Made you a quick example, use it if you like. Not sure if it's 100% functional, haven't really checked it but should do the job.Just change header(&quot;Location: /adminpage&quot;); to the page which has administrative functions on/you only want these specific users to view.[CODE]&lt;?php&nbsp; &nbsp; session_start();&nbsp; &nbsp; $admins = array(&nbsp; &nbsp; &nbsp; &nbsp; 'reinoreiska' =&gt; 'yourpassword'&nbsp; &nbsp; );&nbsp; &nbsp; if(!isset($_SESSION['logged_in'])){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['login'])){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $username = isset($_POST['username']) ? stripslashes(trim($_POST['username'])) : '';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $password = isset($_POST['password']) ? stripslashes(trim($_POST['password'])) : '';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(empty($username) || empty($password)){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $error = 'You left a field empty';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!isset($error)){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(array_key_exists($username, $admins)){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($admins[$username] == $password){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['logged_in'] = true;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }else{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $error = 'We couldn\'t find a record with those details';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }else{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; #$error = 'User doesn\'t exist'&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; // uncomment this if you really want it, however it would allow users to find out the usernames of admins..&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }?&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;h1&gt;Login page&lt;/h1&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;p&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;?php&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($error)){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo $error;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }else{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo 'You need to log-in to view this page.';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; ?&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;/p&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;form method=&quot;POST&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Username: &lt;input type=&quot;text&quot; name=&quot;username&quot; /&gt;&lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Password: &lt;input type=&quot;text&quot; name=&quot;password&quot; /&gt;&lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;submit&quot; name=&quot;login&quot;/&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;/form&gt;&lt;?php&nbsp; &nbsp; }else{&nbsp; &nbsp; &nbsp; &nbsp; header(&quot;Location: /adminpage&quot;);&nbsp; &nbsp; &nbsp; &nbsp; exit();&nbsp; &nbsp; }?&gt;[/CODE]Then on /adminpage (your admin only page):[CODE]&lt;?phpsession_start();if(!isset($_SESSION['logged_in'])){&nbsp; &nbsp; header(&quot;Location: /&quot;);&nbsp; &nbsp; exit();}else{?&gt;Admin page:Page content here...&lt;?php } ?&gt;[/CODE]</blockquote>

[QUOTE="BIOS, post: 370394, member: 15674"] Made you a quick example, use it if you like. Not sure if it's 100% functional, haven't really checked it but should do the job. Just change header("Location: /adminpage"); to the page which has administrative functions on/you only want these specific users to view. [CODE]<?php session_start(); $admins = array( 'reinoreiska' => 'yourpassword' ); if(!isset($_SESSION['logged_in'])){ if(isset($_POST['login'])){ $username = isset($_POST['username']) ? stripslashes(trim($_POST['username'])) : ''; $password = isset($_POST['password']) ? stripslashes(trim($_POST['password'])) : ''; if(empty($username) || empty($password)){ $error = 'You left a field empty'; } if(!isset($error)){ if(array_key_exists($username, $admins)){ if($admins[$username] == $password){ $_SESSION['logged_in'] = true; }else{ $error = 'We couldn\'t find a record with those details'; } }else{ #$error = 'User doesn\'t exist' // uncomment this if you really want it, however it would allow users to find out the usernames of admins.. } } } ?> <h1>Login page</h1> <?php if(isset($error)){ echo $error; }else{ echo 'You need to log-in to view this page.'; } ?> <form method="POST"> Username: <input type="text" name="username" /> Password: <input type="text" name="password" /> <input type="submit" name="login"/> </form> <?php }else{ header("Location: /adminpage"); exit(); } ?> [/CODE] Then on /adminpage (your admin only page): [CODE] <?php session_start(); if(!isset($_SESSION['logged_in'])){ header("Location: /"); exit(); }else{ ?> Admin page: Page content here... <?php } ?>[/CODE] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members