Cusomer login area

Sun, 12/07/2008 - 23:12

#1

Hilco

Joined: 02/25/2008

Points: 378

Hi Kevin, This video will

Hi Kevin,

This video will show you exactly that
http://www.strawberrycampus.com/node/70

It begins by talking about a database, but that's a piece from the earlier videos, the video shows you exactly what you need. Good luck with it!

Sat, 01/03/2009 - 12:25

#2

planb

Joined: 04/28/2008

Points: 30

login page

Hi Hilco, I tried the lesson at http://www.strawberrycampus.com/node/70 but it does not do what I want it to do.

I did not like that you had to have the actual password and username in the php in plain view on the page.

If you look at the link below you will see the page I am working on. One field is the username 'CHRIS' and the other the password 'BALL'. When the correct username are submitted and posted to a php script called login.php I want the script to open up a page called downloads.htm or php where they can download some files from.
But if the wrong password is submitted I want an error message to appear, something like you have submitted the wrong username or password.

I basically want to protect the files on the download page from being downloaded by just anybody.

http://www.planbdesign.co.uk/tsg/index.php

Thanks
Kevin

Sat, 01/03/2009 - 13:19

#3

Hilco

Joined: 02/25/2008

Points: 378

if you don't like the plain

if you don't like the plain view, use md5.

echo md5('password'); // view this string once and copy it in your script
 
// then check 
if(md5($_POST['password']) == 'somethinglike2343sfjdijfskldfs')
{
  // show download links
}
else
{
 // flag error and show login form
}

you can do everything on one page.

Sat, 01/03/2009 - 22:38

#4

planb

Joined: 04/28/2008

Points: 30

Hi Hilco, I've copied your

Hi Hilco,

I've copied your php code into my login.php page. what I get when I put the correct password in is a blank page with this line of digits and letters on 5f4dcc3b5aa765d61d8327deb882cf99.
I think there needs to be some code on line 6 and 10 but I dont know what as I dont know php at all.

Kevin

Sun, 01/04/2009 - 13:09

#5

Hilco

Joined: 02/25/2008

Points: 378

Hi Kevin, Did you watch the

Hi Kevin,

Did you watch the PHP core training? Please watch that if you didn't and implement the exact script as shown in the video.

Make that work at first, and then continue with small changes. I suggest you try to understand what you are doing. The php code provided in the video is pretty basic.

Sun, 01/04/2009 - 13:42

#6

planb

Joined: 04/28/2008

Points: 30

PHP core training

Thanks,

I have not had the chance to watch any of the php videos yet, but I will watch them today.

Thanks,

Kevin

Mon, 01/05/2009 - 16:24

#7

planb

Joined: 04/28/2008

Points: 30

training

I have watched the php core training and understand a lot of it but I did not see anything that would open a webpage page.

I tried the code below, but obviously it did not work.

I understand how it should work, I just dont know what the code could be between the braces.

<?php
$username = "chris";
$password = "ball";

if($_POST['username'] == $username && $_POST['password'] == $password)

{
fopen("http://www.planbdesign.co.uk/tsg/downloads.php/", "r"); 
}
 else
{
fopen("http://www.planbdesign.co.uk/error_page.php", "r"); 
}
?>

kevin

Mon, 01/05/2009 - 19:41

#8

Hilco

Joined: 02/25/2008

Points: 378

Hi

Hi Kevin,

$username = "chris";
$password = "ball";
 
if($_POST['username'] == $username && $_POST['password'] == $password)
{
  // show download links, just show the regular html here
?>
<h1>Downloads</h1>
 <a href="#">Link to file 1</a>
 <a href="#">Link to file 2</a>
<?php
}
 else
{
// show error message and login form
?>
<h1>login failed, please try again</h1>
<form method="POST" action="login.php">
<input> etc. etc.
</form>
<?php
}
?>

fopen is only needed when you try to read the file contents in php. If you just want to include the page, use

<?php
include('path/to/file.php');
?>

Mon, 01/05/2009 - 22:52

#9

planb

Joined: 04/28/2008

Points: 30

Hi Hilco,Thanks for that,

Hi Hilco,

Thanks for that, however instead of just showing the links I need the code to jump to a separate page called downloads.php as there will be around 50 links to download from and this page will have a secific design to it.
If I remove these two lines
Link to file 1
Link to file 2

What do I replace them with that will automatically open http://www.mydomain.co.uk/downloads.php without having to click on a link?

Is there a line of code that says something like

open http://www.mydomain.co.uk/downloads.php

Kevin

Tue, 01/06/2009 - 14:10

#10

Hilco

Joined: 02/25/2008

Points: 378

<?phpheader("Location:http://

<?php
header("Location:http://www.mydomain.co.uk/downloads.php");
?>

please do note that downloads.php should be protected as well so people won't be able to access that page directly without loging in.

Tue, 01/06/2009 - 21:38

#11

planb

Joined: 04/28/2008

Points: 30

php query

Hi, Thanks for that.

I am trying to understand how php works so I have created a couple of test files from memory.

After submitting the correct username and password, instead of opening the page I have asked in the php, it displays the page that the form is posted to. why is this?

The else statement works for the incorrect password.

<?php 
$username = "pass";
$password = "word";


if ($_POST['username'] == $username && $_POST['password'] == $password)
{
header("Location: <a href="http://www.google.com"" title="http://www.google.com"">http://www.google.com"</a>);
}


else {
print "try again, wrong password";
}

?>

Regards
Kevin

Tue, 01/06/2009 - 23:07

#12

Hilco

Joined: 02/25/2008

Points: 378

Hi, Please don't use html in

Hi,

Please don't use html in a header statement, just the direct address as I did in my post above yours.
And a HTML form always posts to the "action" of the form element, that's how browsers work, it has nothing to do with php

Wed, 01/07/2009 - 10:23

#13

planb

Joined: 04/28/2008

Points: 30

header code does not work

Hi,
I honestly dont know where the html came from as it is not there in my header code in Dreamweaver!
When I save this comment for some reason the html is added to the header code? automatically ?? And I cant delete it!

my code looks like this, so it should work but it does'nt!

see it here!
http://www.planbdesign.co.uk/php/statements.htm

$username = "pass";
$password = "word";
 
if ($_POST['username'] == $username && $_POST['password'] == $password)
{
header ("location: <a href="http://www.google.com"" title="http://www.google.com"">http://www.google.com"</a>);
}
else
{
print "wrong password, please try again";
}

kevin

Wed, 01/07/2009 - 13:29

#14

Hilco

Joined: 02/25/2008

Points: 378

Mmm, this site does that by

Mmm, this site does that by itself, when I edit your post I can see what you did

use echo or print statements to check what if statement is called.
put:

echo "yes";

in the above if statement and see if it shows, that's the way you debug your script

The header statement should also be with a capital L. not all browsers accept the lowercase l.

Wed, 01/07/2009 - 15:56

#15

planb

Joined: 04/28/2008

Points: 30

Hi, I have added the echo

Hi,

I have added the echo "yes" statement to my if statement, see below. It works, I can see it on the page, but the header ("Location: http:// .... etc still does nothing! WHY IS THIS?

<?php 
$username = "pass";
$password = "word";

if ($_POST['username'] == $username && $_POST['password'] == $password)
{
header ("Location: <a href="http://www.planbdesign.co.uk/php/downloads.php"" title="http://www.planbdesign.co.uk/php/downloads.php"">http://www.planbdesign.co.uk/php/downloads.php"</a>);
echo "yes it works";
}

else {
print "try again, wrong password";
}

?>

Regards
Kevin

Wed, 01/07/2009 - 17:17

#16

Hilco

Joined: 02/25/2008

Points: 378

Add those 2 lines of code,

Add those 2 lines of code all the way at the top, maybe your errors aren't displaying.

error_reporting(E_ALL);
ini_set('display_errors', '1');

Wed, 01/07/2009 - 20:35

#17

planb

Joined: 04/28/2008

Points: 30

It now works

Hi,
I added those two lines of code and I got an error message, that meant nothing to me. See below.

Warning: Cannot modify header information - headers already sent by (output started at /homepages/44/d83103282/htdocs/planb/php/if_statements.php:10) in /homepages/44/d83103282/htdocs/planb/php/if_statements.php on line 20

I moved the php to the top of the page, out from between the tags. I made sure there was no white space at the top of the page and no white space above the doc type. I tested the form and it redirected me to the correct page!

What stopped it working before I did this, was it because I had the php between the body tags?

Regards
Kevin

Wed, 01/07/2009 - 23:58

#18

Hilco

Joined: 02/25/2008

Points: 378

yes, that's exactly

yes, that's exactly it.

Headers are sent to the browser BEFORE any of the page content is sent. So when you display just a blank line and then you want to send a header, it won't work, because headers were already sent and then the blank line came

Nice going!

Thu, 01/08/2009 - 13:30

#19

planb

Joined: 04/28/2008

Points: 30

Else statement

Hi Hilco

Ok, I now understand that now.

So how do I get the else statment to show an error message above the form when the form html is between the body tags of the html page and the php is on its own page?

I just want the error message "you have entered the wrong username and password" to appear on the same page as the form is.

Also, how do I protect the downloads.php page?

Kevin

Fri, 01/09/2009 - 00:14

#20

Hilco

Joined: 02/25/2008

Points: 378

Hi Kevin, You protect the

Hi Kevin,

You protect the downloads.php page by including the downloads.php links inside the if statement instead of redirecting them. That's why I suggested to put in the links instead of a redirect, it's easier to put the login on the same page as the content for you just now. Else, you need to work with sessions like how it's done in the Strawberry CMS videos.

I suggest you look at the following training video to see how error handling is done:
http://www.strawberrycampus.com/node/76
have a look at around 28 minutes, that's the way I prefer doing it.

Hope that clarifies.

Poll

User login

Recent comments

New forum topics

Active forum topics

Who's new