
November 24th, 2006, 04:03 AM
|
|
Registered User
|
|
Join Date: Apr 2007
Posts: 22,309
Time spent in forums: < 1 sec
Reputation Power: 24
|
|
|
Interpreting "Running Membership with Sessions"
Hello there. I was reading through Hermawan's "Using Sessions in PHP" tutorial with interest in creating a somewhat secure authentication system for an admin control panel I'll be writing for a site. However, being a relative noob to php and mysql, I find it hard to understand what parts of the code mean. So I was wondering if someone could help me by explaining important parts and possibly giving me examples of sql queries that are needed to complete the code. Thanks.
Here's the code Hermawan provides:
php Code:
Original
- php Code |
|
|
|
<?php // functions.php function secure () { if (!($_SESSION["member_id"]) || ($_SESSION["member_id"] == "")) { Header("Location: ./login.php"); } } function login_check ($forms) { $error = ""; $username = $forms["username"]; $password = $forms["password"]; if (trim($username) == "") $error .= "<li>Your username is empty.</li>"; if (trim($password) == "") $error .= "<li>Your password is empty.</li>"; /* from here, do your sql query to query the database to search for existing record with correct username and password */ if (trim($error)!= "") return $error; } function login ($forms) { $username = $forms["username"]; $password = $forms["password"]; /* do your sql query again, but now returning the id of member */ return $member_id; } ?>
php Code:
Original
- php Code |
|
|
|
<?php // login.php include ("functions.php"); if ($_POST) { $error = login_check($_POST); $_SESSION["member_id"] = login($_POST); Header("Location: ./index.php") // Redirect correct member } else { } } ?> <form method="post"> Username : <input type="text" name="username"><br /> Password : <input type="password" name="password"><br /> <input type="submit" value="Login"> </form>
php Code:
Original
- php Code |
|
|
|
<?php // index.php include("functions.php"); secure(); ?>
|