phpeveryday.com

PHP Login System Tutorial: In this post, we try to protect our pages when client go direct at that pages. Before valid login, they shouldn't go at that pages. For this job, we will create a file that will be loaded in every secret pages.

Create a file named "global.php", Enter following codes:

 <?
 require ("./phpsecuresite/phpss/phpss.php");

 function authwrapper(){
 	$status = phpss_validate();
 	
 	switch($status){
		case "phpss_validate_allow":
		break;
		
		case "phpss_validate_acl_deny":
		exit("You don't have access right");
		break;
		
		case "phpss_validate_nosession":
		exit("Login, Please");
		break;
		
		case "phpss_validate_hijack_fail":
		exit("Whats going on your IP?");
		break;
		
		case "phpss_validate_ipaccess_deny":
		exit("Your IP blocked");
		break;
		
		case "phpss_validate_timeout_fail":
		exit("You session is time out. Relogin, please.");
		break;
		
		default:
		exit("Sorry!");
		
	
	}
}
 ?>

<?
require "./global.php";
authwrapper();
?>

when user go secretpages.php directly, he will get like this: