Security


#1

I have my enter page with user: and password: fields.How can I let to user to view another pages ONLY after he fill right this fields on enter page.Also I want to know how can I protect my pages from changing manually of URL without enterpage.
Thanks.


#2

First I don’t initially see how this works with MySQL but the login page may access a DB for validation so i’ll let it slid. :)

You will need to look into sessions and the session variable ($_SESSION). You can set up a session variable for login On every other page you can varify the session variable (login) is set to true and allow access otherwise kick them back to the log in screen. This is a very basic log in scenario but you should get the picture.