Code Examples -> An Authenticator with Cookies and Redirect

	Submit Your Code
	SEO Monitor
	UpTime Monitor
	PHP Code Contest
	My Favorite Examples
	My Favorite Articles
	Update Your Profile

More Weber Sites
	PHP Code Search
	Web Development Forums
	Learn MySQL Playing Trivia
	PHPBB2 Templates
	Web Development Index
	PHP Web Logs (BLogs)
	Web Development Resources
	Web Development Content

Recommended Links
	PHPClasses
	PHP Editor
	PHP Jobs
	Vision.To Design
	Ajax Tutorials
	PHP Programming Help
	PHP/MySQL Programming
	Webmaster Resources
	Webmaster Forum
	XML meta language
	website builder

Recommended
	Submit Site
	Forex Trading Online forex trading platform


BACK		ADD A COMMENT		SEND TO A FRIEND		ADD TO MY FAVORITES		ADD CODE EXAMPLES		PRINT

PHP Code Examples

Title :	An Authenticator with Cookies and Redirect
Categories :	Authentication, PHP	Sheridan Saint-Michel
Date :	Feb 24th 2001
Grade :	2 of 5 (graded 20 times)
Viewed :	18457
File :	No file for this code example.
Images :	No Images for this code example.

Search :	More code by Sheridan Saint-Michel
Action :	Grade This Code Example
Tools :	My Examples List

Code

<?php

//Put in your own info for username, password, DB, email@address, Cookiename,
//the name of this page (currently login.php) and the name of your subscribe
//or new user page (currently new.php). I went ahead and included all the HTML
//so this page should work as is, with only the changes described above needed
// - Sheridan Saint-Michel (Lysander@onlychildclub.com)

$dblink = mysql_pconnect("localhost","username","password");
mysql_select_db("DB");

$headers=0; //Make Sure HTML Headers are in place before the form

//after Authenticating the script automatically sends the browser to
//the webpage of your choice (note if your page calls this
//script with ?redirect="foobar.php" it will automatically
//redirect to foobar.php after authenticating. Set the default
//redirect page here

if ( !isset($redirect))
{
$redirect = "index.php";
}

if (isset($UserID) && isset($Password)) {

$query = "select * from members where UserID = \"$UserID\" and Password =
\"$Password\"";

if ( !($dbq = mysql_query($query, $dblink))) {
echo "Unable to query database. Please Contact <a
href=\"mailto:email@address\">email@address</a>.\n";
exit;
}

$lim = mysql_num_rows( $dbq );

if ($lim != 1) {

$headers=1; //HTML headers in place
echo "<HTML><HEAD><TITLE>Login Page</TITLE></HEAD><BODY>";
echo "<B>Invalid User ID or Password. Please Try again</B><BR>";

}

if ($lim == 1) {

//make unique session id and store it in Database
$timer = md5(time());
$sid = $UserID . "+" . $timer;
SetCookie("Cookiename",$sid,time()+2592000); //Set Cookie for 30 days
$query = "update members set sid=\"$timer\" where UserID=\"$UserID\"";

if( !($dbq = mysql_query( $query, $dblink))) {
echo "Unable to update database. Please contact <a
href=\"mailto:email@address\">email@address</a>.\n";
exit;
}

$headers=1;
header("Location: $redirect");
exit;
}

}

if (isset($Cookiename)) {
$headers=1; //make sure HTML headers are in place before the form
$sidarray = explode("+", "$Cookiename");
$query = "select * from members where UserID = \"$sidarray[0]\" and sid = \"$sidarray[1]
\"";

if ( !($dbq = mysql_query($query, $dblink))) {
echo "Unable to find database. Please Contact <a
href=\"mailto:email@address\">email@address</a>.\n";
exit;
}

if (mysql_num_rows( $dbq ) == 1) {
echo "<HTML><HEAD><TITLE>Login Page</TITLE></HEAD><BODY>";
echo "You are already logged in as $sidarray[0].<BR>";
echo "You may logon as another user or simply begin using our services with your current
session.<BR>";
echo "Click <A Href=\"http://www.mydomain.com/home.php\">Here</A> to return to our
homepage.";
}
}

if ($headers == 0) {
echo "<HTML><HEAD><TITLE>Login Page</TITLE></HEAD><BODY>";
}

echo "<Form Action=\"login.php\" METHOD=POST>";
echo "<H2>User Name</H2>";
echo "<Input TYPE=\"text\" Name=\"UserID\" Value=",$UserID,">";
echo "<BR>";
echo "<H2>Password</H2>";
echo "<Input TYPE=\"password\" Name=\"Password\">";
echo "<BR>";
echo "<Input Type=\"submit\" Value=\"Submit\">";
echo "<Input Type=\"hidden\" Name=\"redirect\" Value=\"$redirect\">";
echo "</FORM>";
?>
<A HREF=new.php>Create an Account</A>
</BODY>
</HTML>

<?php
//Header for Authenticator with Cookies:
//I received some e-mail asking what code should be placed on other pages of the website using my Authenticator
//with Cookies and Redirect. This should appear before the HTML Tag on any page you want protected.

//Put in your own info for username, password, DB, email@address, Cookiename,
//the name of this page (currently thispage.php), and the name of the login page (currently
login.php).
//Cookiename MUST be the same as Cookiename in the login page.

$dblink = mysql_pconnect("localhost","username","password");
mysql_select_db("DB");

if( !(isset( $CookieName )))
{
header("Location: http://www.yourdomain.com/login.php3?redirect=thispage.php");
exit;
}

$sidarray = explode("+","$CookieName");

$query = "select * from members where UserID = \"$sidarray[0]\" and sid = \"$sidarray[1]\"";

if ( !($dbq = mysql_query( $query, $dblink))) {
echo "Unable to find database. Please Contact <A
HREF=\"mailto:email@address\">email@address</a>.\n";
exit;
}

if (mysql_num_rows( $dbq ) != 1) {
header("Location: http://www.yourdomain.com/login.php3?redirect=thispage.php");
exit;
}

?>

Related Code Examples

	Using $PHP_AUTH_USER and $PHP_AUTH_PW to authenticate. Categories : Authentication, PHP
	Function to remember password Categories : PHP, Authentication, Personalization and Membership
	PHP4 MYSQL Authentication Script with cookie. Short & Sweet Categories : Authentication, Apache, Cookies, PHP, MySQL
	Authorize Me! An authentication script. Categories : MySQL, Databases, Authentication, PHP
	Authentication script to authenticate users in Active Directory through LDAP. Categories : LDAP, Authentication, Cookies, PHP
	MD5 secured login Categories : PHP, Java Script, Authentication, Security
	Import the yahoo address book. Categories : PHP, CURL, Authentication
	Simple and fast user authentication Categories : PHP, PHP Classes, Authentication
	Is there some possibility to link a database to an htaccess file, so that instead of having a passwd file you would have a database with DES-crypted password and username fields? Categories : Authentication, PHP, General SQL, Databases
	Authentication HTTP protocol POST Categories : Authentication, HTTP, PHP
	Full membership authentication system. Categories : Authentication, MySQL, PHP, Databases
	A simple PHP login script that you can modify to suite your needs. It use a session to store data in a session file submited by the page. Categories : PHP, Sessions, Security, Authentication
	Implementing a "Members ONLY" area Categories : PHP, MySQL, Databases, Authentication
	AUTH (.htaccess style) - a login system that uses PostgreSQL. Categories : PHP, Authentication, Databases, PostgreSQL
	Form Security - Match A Value For Success Categories : PHP, Authentication, HTML and PHP, Sessions, Security

User Comments

	Craig Horchem wrote : 754 Hello, I have downloaded your script and it has worked flawless freestanding. However, I do use it in two folders, each authenticating from a table in the same database, and keep getting weird occurences. Such as the page will just not display blank. I did only modify one thing which shouldn`t affect this. Any suggestions, conclusions??? I don`t really understand why it will not work in two different folders.
	James Reimer wrote :845 `I might suggest changing $query = "select * from members where UserID = \"$UserID\" and Password = \"$Password\""; to $query = "select id from members where UserID = \"$UserID\" and Password = \"$Password\""; to avoid passing the password around. It should still function correctly.`