Hi im trying to write a script that restricts the access of user to a page until he has logged in with username and password. I keep getting undefined index file for username and password? any one have any suggestions??
<!DOCTYPE html>
<html lang="en">
<head>
<title> Exercise 3</title>
<meta charset="utf-8">
</head>
<body>
<?php
$name = “Frank”;
$age = “28”;
var_dump($name);
echo "<br>";
print_r($name);
echo "<br>";
var_dump($age);
echo "<br>";
?>
</body>
</html>
分享 Rather a big topic. The easiest way to protect a directory is to have the web server do the grunt work and setup an htaccess file. http://www.htaccesstools.com/htaccess-authentication/ is a online tool to do that.
To do it through PHP you need to get the user login and then give a session cookie to tell the other URLS if he is logged in. If the cookie is hackable or the other urls assume he is logged in then he can easily bypass your login. Unless it is only a single page you want to secure.
If you want to store users in a database there are a number of security issues that appear quickly. The user input must be completely cleaned of any charactors that may allow for hacks.
分享
