Enjoy an ad free experience by logging in. Not a member yet?
Register .
PM User | 1
Regular Coder
Join Date: Jan 2011
Posts: 117
Thanks: 27
Thanked 0 Times in 0 Posts
Problem with auth session.
I am having some trouble with my session. I am trying to stop people from gaining access to cpanel.php from the web browser. I did it before and now it's giving me problems. I got it to where when you try and view cpanel.php it directs the user to denied.php and if they enter in there details wrong it will bring them to a failed.php page. But my problem is, i think my code is wrong, if i could get some help verifying what error is the problem and a solution i will be grateful! I am updating the milw0rm script, i found a source online and the files are well messed up, and i had to use a google translator to translate the turkish language. So i added some thing's to it but yeah. I have a problem with my session. Thanks in advanced!
login-exec.php:
PHP Code:
<?php //Start session session_start (); //Include database connection details require_once( 'config.php' ); //Array to store validation errors $errmsg_arr = array(); //Validation error flag $errflag = false ; //Function to sanitize values received from the form. Prevents SQL injection function clean ( $str ) { $str = @ trim ( $str ); get_magic_quotes_gpc ()) { $str = stripslashes ( $str ); mysql_real_escape_string ( $str ); //Sanitize the POST values $login = clean ( $_POST [ 'login' ]); $password = clean ( $_POST [ 'password' ]); $code = ( $_POST [ 'code' ]); //Input Validations if( $login == '' ) { $errmsg_arr [] = 'Login ID missing' ; $errflag = true ; $password == '' ) { $errmsg_arr [] = 'Password missing' ; $errflag = true ; $code == '' ) { $errmsg_arr [] = 'Incorrect captcha Code' ; $errflag = true ; //If there are input validations, redirect back to the login form if( $errflag ) { $_SESSION [ 'ERRMSG_ARR' ] = $errmsg_arr ; session_write_close (); header ( "location: index.php" ); //Create query $qry = "SELECT * FROM members WHERE login='$login' AND passwd='" . md5 ( $_POST [ 'password' ]). "'" ; $result = mysql_query ( $qry ); //Check whether the query was successful or not if( $result ) { mysql_num_rows ( $result ) == 1 ) { //Login Successful session_regenerate_id (); $members = mysql_fetch_assoc ( $result ); $_SESSION [ 'SESS_MEMBER_ID' ] = $members [ 'member_id' ]; session_write_close (); header ( "location: cpanel.php" ); //Login failed header ( "location: failed.php" ); "Query failed" ); ?>
Auth.php:
PHP Code:
<?php if(!isset( $_SESSION [ 'SESS_MEMBER_ID' ]) || ( trim ( $_SESSION [ 'SESS_MEMBER_ID' ]) == '' )) { header ( "location: denied.php" ); ?>
cpanel.php:
PHP Code:
<SCRIPT LANGUAGE='JAVASCRIPT' TYPE='TEXT/JAVASCRIPT'><?php require_once( 'auth.php' ); ?> <div align="left">
PM User | 2
Master Coder
Join Date: Jun 2003
Location: Cottage Grove, Minnesota
Posts: 9,045
Thanks: 8
Thanked 1,029 Times in 1,020 Posts
What is the error you are getting?
PM User | 3
Regular Coder
Join Date: Jan 2011
Posts: 117
Thanks: 27
Thanked 0 Times in 0 Posts
Im not a very advanced php coder. But when the user logs in to the cpanel it brings them to the denied page. It's something with the session, its not reading properly.
PM User | 4
Super Moderator
Join Date: Mar 2007
Location: Florida, USA
Posts: 3,601
Thanks: 2
Thanked 397 Times in 390 Posts
You need to have
session_start() above where you try to access $_SESSION somewhere.
PM User | 5
Regular Coder
Join Date: Jan 2011
Posts: 117
Thanks: 27
Thanked 0 Times in 0 Posts
Quote:
Originally Posted by
Inigoesdr
You need to have
session_start() above where you try to access $_SESSION somewhere.
my name is inigo montoya you killed my father prepare to die! Haha, where do i add it
PM User | 6
New Coder
Join Date: Aug 2002
Location: Moscow, RU
Posts: 23
Thanks: 0
Thanked 1 Time in 1 Post
Just add session_start() to auth.php
Code:
<?php
session_start()
if(!isset($_SESSION['SESS_MEMBER_ID']) || (trim($_SESSION['SESS_MEMBER_ID']) == '')) {
header("location: denied.php");
exit();
}
?>
Everytime you use sessions or sessions variables you must initialize the sessions firstly. so there you go by session_start().
Last edited by Inci; 09-16-2011 at 11:07 PM ..
PM User | 7
Regular Coder
Join Date: Jan 2011
Posts: 117
Thanks: 27
Thanked 0 Times in 0 Posts
Error:
Code:
( ! ) Parse error: syntax error, unexpected T_IF in C:\wamp\www\milworm\admin\auth.php on line 3
That is what happends when i added a session where you told me. Lol, i take it out it works :| I have a session in the login-exec.php
PM User | 8
New Coder
Join Date: Aug 2002
Location: Moscow, RU
Posts: 23
Thanks: 0
Thanked 1 Time in 1 Post
whoopsss, sorry my bad, forgot ";"
PM User | 9
Regular Coder
Join Date: Jan 2011
Posts: 117
Thanks: 27
Thanked 0 Times in 0 Posts
Still not working grrrr! When the user accesses cpanel.php like this
http://71.62.39.150/milworm/admin/cpanel.php
It will not allow them, but when they sign up and login it still brings them to denied.php. Ugh !
PM User | 10
New Coder
Join Date: Aug 2002
Location: Moscow, RU
Posts: 23
Thanks: 0
Thanked 1 Time in 1 Post
hmmm, that's very strange. did ya tried to start from login-exec.php page or you trying from cpanel.php ? login-exec.php must be visited firstly to authorize user firstly.
PM User | 11
Senior Coder
Join Date: Jul 2011
Posts: 1,226
Thanks: 3
Thanked 171 Times in 171 Posts
I'm pretty sure that session_start() shouldn't be in the auth.php page, it should in fact be at the VERY top of cpanel.php - above any HTML and above your script tag above the html tag.
example:
PHP Code:
<?php session_start (); ?>
<script type......
Users who have thanked BluePanther for this post:
PM User | 12
Regular Coder
Join Date: Jan 2011
Posts: 117
Thanks: 27
Thanked 0 Times in 0 Posts
lol i already figured this out. thanks though!
Jump To Top of Thread
Thread Tools
Rate This Thread
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
All times are GMT +1. The time now is 06:04 AM .
Advertisement
Log in to turn off these ads.
Before you post, read our: 
Problem with auth session.
