inloggen, pagina doet niks ?
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Login</title>
<link href="/style.css" rel="stylesheet" type="text/css">
</head>
<body style="font-family: tahoma;">
<h3>Simple CMS Login</h3>
<p><img src='img/security.gif' title='please login'></p>
<form action="login.php" method="post" name="frm">
<table cellspacing="4" cellpadding="4" style="border-bottom-width: thin; border-left-width: thin; border-right-width: thin; border-top-width: thin; border-style: dotted; border-color: red;">
<tr>
<td>username</td>
<td><input type="text" name="formlogin" class="cssborder"></td>
</tr>
<tr>
<td>password</td>
<td><input type="password" name="formpass" class="cssborder"></td>
</tr>
</table>
<br> <input type="submit" value="login" class="cssborder">
</form>
Code (php)
1
2
3
4
5
6
7
8
9
10
11
2
3
4
5
6
7
8
9
10
11
<?
//echo "formlogin=$formlogin";
//echo "<br>formpass=$formpass";
//echo "<br>login=$login";
//echo "<br>pass=$pass";
if ($formpass == $pass && $formlogin == $login) {
session_register("loggedin");
$loggedin = "1";
//logged in so run a javascript redirect to admin page.
?>
//echo "formlogin=$formlogin";
//echo "<br>formpass=$formpass";
//echo "<br>login=$login";
//echo "<br>pass=$pass";
if ($formpass == $pass && $formlogin == $login) {
session_register("loggedin");
$loggedin = "1";
//logged in so run a javascript redirect to admin page.
?>
<script language="javascript">
<!--
location.replace("admin");
-->
</script>
<h4><a href='admin'>you are now logged in, continue to the admin section</a></h4>
Code (php)
1
2
3
2
3
<?
}
?>
}
?>
<p><a href="login.php"><small>reload</small></a></p>
</body>
</html>
Code (php)
1
2
3
4
5
6
2
3
4
5
6
<?php
if ($formpass == $pass && $formlogin == $login) {
session_register("loggedin");
$loggedin = "1";
//logged in so run a javascript redirect to admin page.
?>
if ($formpass == $pass && $formlogin == $login) {
session_register("loggedin");
$loggedin = "1";
//logged in so run a javascript redirect to admin page.
?>
<script language="javascript">
<!--
location.replace("admin");
-->
</script>
<h4><a href='admin'>you are now logged in, continue to the admin section</a></h4>
Code (php)
1
2
3
2
3
<?
}
?>
}
?>
doe je
Code (php)
1
2
3
4
5
6
7
2
3
4
5
6
7
<?php
if (($_POST['formpass'] == $pass) && ($_POST['formlogin'] == $login)) {
session_register("loggedin");
$loggedin = "1";
header("Location: admin.php");
}
?>
if (($_POST['formpass'] == $pass) && ($_POST['formlogin'] == $login)) {
session_register("loggedin");
$loggedin = "1";
header("Location: admin.php");
}
?>
Je toont niet alles, dus er kan nog wat meer niet goed zijn. Ik neem aan dat in config.php de variabele $pass en $login ingevuld worden.
edit:
Daarbij weet ik niet hoe jouw logincontrole werkt. Dit is misschien ook belangrijk om even te laten zien. Ik weet namelijk niet precies wat je wil met session_register()
Let op! Kijk uit bij het gebruik van javascript. Niet iedereen heeft javascript op actief staan en FireFox doet vaak andere dingen met javascript dan IE (blijkt uit mijn ervaring :)).
Gewijzigd op 02/10/2005 14:07:00 door Barman V
Het stukje dat ik wil zien is hoe de POST en variabele waarden ingevuld worden.
Dus:
$_POST['formpass']
$pass
$_POST['formlogin']
$login
Dit begrijp ik niet echt
<script language="javascript">
<!--
location.replace("admin");
-->
</script>
<h4><a href='admin'>you are now logged in, continue to the admin section</a></h4>
De href kan volgens mij geen mapnaam zijn, maar moet een verwijzing naar een bestand zijn. Misschien dat de verwijzing naar een mapnaam wel werkt als er een index.php in staat, dat weet ik niet.
Code (php)
Krijg je dan Correcte login te zien?
Gewijzigd op 02/10/2005 16:05:00 door Barman V
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
<?php
//MODIFY THIS.
$host = "localhost"; //mostly this is localhost if mysql server is running on the same machine as script.
$user = "Mijn gebruikersnaam"; //database username here
$password = "mijn wachtwoord"; //database password here
$database = "mijn database"; //the name of the database where you want the script installed in.
//this are the logins for the admin part. Change them for security.
$login = "test"; //your login for the admin section.
$pass = "1234"; //your login for the admin section.
//set the page color here.
$backcolor = "white";
//NO MODIFIYNG BELOW THIS
function database_connect(){
global $host, $database, $user, $password;
$link = @mysql_connect("$host","$user","$password");
$sql_error = mysql_error();
if (!$link) {
echo "Connection with the database couldn't be made.<br>";
echo "$sql_error";
exit;
}
if (!@mysql_select_db("$database")) {;
echo "The database couldn't be selected.";
exit;
}
return $link;
}
?>
//MODIFY THIS.
$host = "localhost"; //mostly this is localhost if mysql server is running on the same machine as script.
$user = "Mijn gebruikersnaam"; //database username here
$password = "mijn wachtwoord"; //database password here
$database = "mijn database"; //the name of the database where you want the script installed in.
//this are the logins for the admin part. Change them for security.
$login = "test"; //your login for the admin section.
$pass = "1234"; //your login for the admin section.
//set the page color here.
$backcolor = "white";
//NO MODIFIYNG BELOW THIS
function database_connect(){
global $host, $database, $user, $password;
$link = @mysql_connect("$host","$user","$password");
$sql_error = mysql_error();
if (!$link) {
echo "Connection with the database couldn't be made.<br>";
echo "$sql_error";
exit;
}
if (!@mysql_select_db("$database")) {;
echo "The database couldn't be selected.";
exit;
}
return $link;
}
?>
In jouw code zie ik bijvoorbeeld geen $_POST['formpass'] en $_POST['formlogin'] staan.
In jouw eerste code zie ik staan:
if ($e == "1"){
$e wordt nergens ingevuld.
Maar even over de oplossing.
1.
Als je dit doet
Code (php)
Krijg je dan Correcte login te zien als je inlogt met 'test' en wachtwoord '1234'?
2.
In de beveiligde pagina's check je of de gebruiker is ingelogd. Hoe ziet die code eruit?
Gewijzigd op 03/10/2005 12:56:00 door gabi
in de oude code stond iets dat verwees naar admin, er is alleen een map die admin heet dus waarschijnlijk moet hij verwijzen naar een bestand in de folder admin
ik heb even gezocht ik kwam op admin/index.php
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Mike - CMS Script</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="./style.css" rel="stylesheet" type="text/css">
</head>
<body background="../img/int1_back.gif" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<table width="970" border="0" align="center" class="hoofdtabel">
<tr>
<td>
<table width="970" border="0" cellpadding="0" cellspacing="0" background="../img/int1_topback.gif">
<tr>
<td> <a href="./index.php">YOUR LOGO HERE</a></td>
<td align="right" valign="top"><br>
<a href="./index.php?page=config" class="titel2"><u>Configure Homepage</u></a>
<a href="./index.php?page=news" class="titel2"><u>Page - Admin</u></a> <br>
<br><div align="right">
Code (php)
</div></td>
</tr>
</table>
<table width="970" border="0">
<tr>
<td align="left" valign="top"><iframe src="item_list.php" width="485" height="360" id="links" name="links" class="iframe" scrolling="auto" frameborder="0"></iframe></td>
<td rowspan="2" valign="top" align="right"><iframe src="about:blank" width="485" height="586" id="rechts" name="rechts" class="iframe" scrolling="auto" frameborder="0"></iframe></td>
</tr>
<tr>
<td valign="top" align="left">
<iframe src="item_legend.php" width="485" height="220" id="onder" name="onder" class="iframe" scrolling="auto" frameborder="0"></iframe>
</td>
</tr>
</table>
<table width="970" border="0">
<tr>
<td align="left" valign="top"><iframe src="config_pages.php" width="485" height="360" id="links" name="links" class="iframe" scrolling="auto" frameborder="0"></iframe></td>
<td rowspan="2" valign="top" align="right"><iframe src="about:blank" width="485" height="586" id="rechts" name="rechts" class="iframe" scrolling="auto" frameborder="0"></iframe></td>
</tr>
<tr>
<td valign="top" align="left">
<iframe src="about:blank" width="485" height="220" id="onder" name="onder" class="iframe" scrolling="auto" frameborder="0"></iframe>
</td>
</tr>
</table>
Code (php)
1
2
3
2
3
<?
}
?>
}
?>
</td>
</tr>
</table>
</body>
</html>
######## en admin/aut.php bestand hieronder #########
Code (php)
1
2
3
4
5
6
7
8
9
10
11
2
3
4
5
6
7
8
9
10
11
<?
session_start();
include ("../config.php");
if ($loggedin != "1"){
header("Location: /login.php?e=1"); /* Redirect browser */
/* Make sure that code below does not get executed when we redirect. */
exit;
}
//echo "ok";
?>
session_start();
include ("../config.php");
if ($loggedin != "1"){
header("Location: /login.php?e=1"); /* Redirect browser */
/* Make sure that code below does not get executed when we redirect. */
exit;
}
//echo "ok";
?>
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<?
/*function authenticate() {
header("WWW-Authenticate: Basic realm=\"Login newsscript Admin\"");
header("HTTP/1.0 401 Unauthorized");
print("You must enter a valid login username and password to access the CMS-admin\n");
exit;
}
if(!isset($PHP_AUTH_USER))
{ authenticate(); }
else {
$php_auth_user = $_SERVER['PHP_AUTH_USER'];
$php_auth_pass = $_SERVER['PHP_AUTH_PW'];
if ($php_auth_user != $login || $php_auth_pass != $pass) {
authenticate();
exit;
}
}
*/
?>
/*function authenticate() {
header("WWW-Authenticate: Basic realm=\"Login newsscript Admin\"");
header("HTTP/1.0 401 Unauthorized");
print("You must enter a valid login username and password to access the CMS-admin\n");
exit;
}
if(!isset($PHP_AUTH_USER))
{ authenticate(); }
else {
$php_auth_user = $_SERVER['PHP_AUTH_USER'];
$php_auth_pass = $_SERVER['PHP_AUTH_PW'];
if ($php_auth_user != $login || $php_auth_pass != $pass) {
authenticate();
exit;
}
}
*/
?>
Gewijzigd op 03/10/2005 13:00:00 door gabi