How do I secure a profile page for membership saftey in php or html?

Question

0.00/5 (No votes)

See more:

So I need to secure a profile page [Here is the link] Well anyone can access it and I don't want that to happen I want that page to stay closed/or locked until someone has logged on. My website has memberships and I want to protect the memberships from people logging in to it or they will be able to use the membership without paying.

Here is my code for profile.php:

PHP

<?php
//You check if the user is logged in or not
if($user_logged_in == true)
{
    require 'profile_loggedin.php';
}
else
{
    require 'profile_notloggedin.php';
}
?>

Here is the code for user_notloggedin.php

PHP

<?php
include('cn.php');
?>

HTML

<!DOCTYPE html PUBLICK "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Login</title>
</head>
<body>
<form action="profile.php" method="post">
	<p>Username:</p>
	<input type="text" name="userUsername" col="50" />
	<p>Password:</p>
	<input type="password" name="userPassword" col="50" />
	<br />
	<input type="submit" value="login" />
	<br /><br />
	<a href="register.php">Register</a>
</form>
<a href="http://lulzhost.net76.net/advlogin/contact/index.html">Or go here to get a account that works</a>
<a href="http://lulzhost.net76.net/mm/"><h3>Don't want an account go here to watch some of the vids we have or post a vid</h3></a>
</body>
</html>

Posted 21-Oct-13 5:41am

Braydon

Updated 21-Oct-13 6:53am

v3

Add a Solution

Comments

Captain Price 21-Oct-13 13:05pm

Where is the code to determine the value of $user_logged_in in profile.php ?

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

**Captain Price** · Accepted Answer · 2013-10-21T06:00:00

Solution 1

It's very simple. You just have to check weather the user is logged in or not. If logged in you render the page, if not you do not render the page.

XML

<?php
//profile.php

//You check if the user is logged in or not
if($user_logged_in == true)
{
?>
    <!--User is logged in. Render your secure page!-->
    <p>Welcome, You're logged in to a secure page</p>
<?php
}
else
{
?>
    <!--User is not logged in. Print an error message!-->
    <p>Please log in to continue</p>
<?php
}
?>

A Technique: A better way is you can create 3 files.
-- profile.php
-- profile_loggedin.php
-- profile_not_loggedin.php

Then,

C#

<?php
//You check if the user is logged in or not
if($user_logged_in == true)
{
    require 'profile_loggedin.php';
}
else
{
    require 'profile_notloggedin.php';
}
?>

In profile_loggedin.php you can write code for the logged in mode of the profile page and in profile_not_loggedin.php the not logged in mode of the profile page.

Posted 21-Oct-13 6:00am

Captain Price

Updated 21-Oct-13 6:32am

v2

Comments

Braydon 21-Oct-13 12:23pm

DO I ADD this code the profiles page?

Captain Price 21-Oct-13 12:26pm

Yes. You should include all your code in your profile inside this If-Else.

Braydon 21-Oct-13 12:27pm

OK I did but it still shows the content but it was correct when I was logged out.

Braydon 21-Oct-13 12:29pm

And It wouldn't show when I was logged in.

Captain Price 21-Oct-13 12:35pm

See my edit (The technique). It should work (100% sure). If not there must be some error with your code.

Braydon 21-Oct-13 12:44pm

What should I do to my form post or get. And what php file do I need for the login

Captain Price 21-Oct-13 12:59pm

I have no idea about your project nor your myform. Basically between { and } in the If-Else statement that i mentioned, you can add any HTML or PHP code.

You should have a login.php page in your web site. Create a login form there and use php sessions to store logged in user data. So in profile.php you only need to check in sessions whether or not the user is logged in. See: http://www.youtube.com/watch?v=mRmLkzrfDzU

Braydon 22-Oct-13 10:52am

Ok I got it working but I want to start a session so they don't haft to keep logging in on every page that requires an account.

Captain Price 22-Oct-13 11:04am

yes you have to use session. cheers :)