how do u create login pages??

xxm116xx · 02-20-2003, 07:38 PM

i reaaallly could use ur help on this

saline · 02-20-2003, 11:09 PM

Although I'm probably not going to be able to help you I'm willing to bet if you could provide more information other people would be able to assist you more easily.

I assume this is for a web page? Do you need a password or does it not need be secure? Is there anything special that needs to happen with the logins?

So if you help them it'll be easier for them to help you.

sde · 02-20-2003, 11:18 PM

usually with a login, you will have to use sessions or cookies. you can make a simple login that directs between 2 pages on success or failure without cookies or sessions, .. however nothing would prevent the user from typin the address of the successful redirect into the browser.

a login script is a fairly common script and i am thinking i may write a tutorial here on it.

Admin · 02-21-2003, 07:49 AM

.htaccess

w00t

joe_bruin · 02-21-2003, 11:24 AM

creating a login page is pretty easy. create a form with a name and password field and submit it to your verify page. the verify page should compare the hashed password in your database to the one submitted. (you are hashing your passwords, right? with a salt?)

that's the easy part.

the hard part is enforcing your authentication. sessions has been brought up, and is probably the easiest way.

Quote:

however nothing would prevent the user from typin the address of the successful redirect into the browser.

not true: the verification page sets the proper session variables / cookies, so if a user is not authenticated, the 'success' page (and any other page requiring login) would reject the user.

using htaccess is a pain because you have to make sure your .ht files are in sync with the user database (you may have multiple webservers), it requires passing the password on every single page request (making it impossible to switch to a non-ssl connection after authentication), and it is not designed to handle large volumes of users (seeking through the access files does not scale well).

sde · 02-21-2003, 12:05 PM

joe, my redirect statement you quoted was taken out of context. if you quoted the part before the comma, it would make sense. i was referring to using that type of authentication without sessions or cookies.

joe_bruin · 02-21-2003, 12:10 PM

oops, my bad.

xxm116xx · 02-21-2003, 11:13 PM

the thing i wanna do is like, lets say, nintendo.com , theres a login page, to access ur info page, and edit ur stuff with a profile n other things like that, how do i do that

sde · 02-22-2003, 12:11 AM

xxmm .. do you know any php at all?

xxm116xx · 02-22-2003, 11:55 AM

nope . .

sde · 02-22-2003, 01:32 PM

just a bit of advice, .. try something more simple if you want to learn php. get used to the language before you try scripting database stuff. i highly recommend picking up a PHP book, .. such as one published by WROX "beginning PHP". that should get you started, .. then you can always ask questions here, .. but specific questions will more likely get you better results.

i love to help people learn to code, but i won't code for them.

xxm116xx · 02-22-2003, 01:42 PM

arite thanks

Admin · 02-24-2003, 11:04 AM

mike will code for beer though.

sde · 02-24-2003, 12:29 PM

so long as it is good beer.