login.php:
<?php
session_start();
$users = array();
$users[] = array('peter','484');
$users[] = array('anders', 'pære');
$username = $_POST['username'];
$password = $_POST['password'];
if(!empty($username) && !empty($password) ) {
$ok = false;
foreach($users as $user) {
if( $user[0] == $username && $user[1] == $password )
$ok = true;
}
if( $ok ) {
$_SESSION['username'] = $username;
header("Location: velkommen.html");
exit;
}
else {
$msg = 'Forkert brugernavn og/eller kodeord';
}
}
if( isset( $msg ) )
print '<p><center><font color="red">'.$msg.'</font></center></p>';
?>
<form method="POST" action="<?=$_SERVER['PHP_SELF']?>">
Brugernavn: <input type="text" name="username"><br/>
Kodeord: <input type="password" name="kodeord"><br/>
<input type="submit" value="ok">
</form>
------------------
tjek.php:
<?php
session_start();
if(! isset($_SESSION['username']) ) {
header("Location: fejlside.html");
exit;
}
?>
--------------------
hvis en side, hemlig, skal beskyttes med login, så gør du bare
hemlig.php:
<?php include('tjek.php'); ?>
-----------------------
alternativ kan du bruge apache's .htaccess
