Trække username ud fra session.
Jeg ved sq ikke rigtigt så meget om sessions, men jeg har et login-script som benytter sig af det.Ville høre om man kunne trække username ud på alle de sider som har inkluderet scriptet? og hvordan?
Dele af Scriptet er vist herunder.
<?php
/* check login script, included in db_connect.php. */
session_start();
if (!isset($_SESSION['user_name']) || !isset($_SESSION['password'])) {
$logged_in = 0;
return;
} else {
// remember, $_SESSION['password'] will be encrypted.
if(!get_magic_quotes_gpc()) {
$_SESSION['user_name'] = addslashes($_SESSION['user_name']);
}
// addslashes to session username before using in a query.
$pass = $db_object->query("SELECT password FROM user WHERE user_name = '".$_SESSION['user_name']."'");
if(DB::isError($pass) || $pass->numRows() != 1) {
$logged_in = 0;
unset($_SESSION['user_name']);
unset($_SESSION['password']);
// kill incorrect session variables.
}
$db_pass = $pass->fetchRow();
// now we have encrypted pass from DB in
//$db_pass['password'], stripslashes() just incase:
$db_pass['password'] = stripslashes($db_pass['password']);
$_SESSION['password'] = stripslashes($_SESSION['password']);
//compare:
if($_SESSION['password'] == $db_pass['password']) {
// valid password for username
$logged_in = 1; // they have correct info
// in session variables.
} else {
$logged_in = 0;
unset($_SESSION['user_name']);
unset($_SESSION['password']);
// kill incorrect session variables.
}
}
// clean up
unset($db_pass['password']);
$_SESSION['user_name'] = stripslashes($_SESSION['user_name']);
?>
