krakjoe
October 24th, 2006, 09:46
ok, so ......
login.php
<?php session_start();
// FUNCTION TO AUTHORIZE A USER WITH CPANEL LOGIN DETAILS
function auth()
{
if (empty($_POST['user']) || empty($_POST['pass']))
{
header("location: login.php");
exit;
}
if ( strlen($_POST['user']) > 8 )
{
header("location: login.php");
exit;
}
$url = "http://".$_POST['user'].":".$_POST['pass']."@localhost:2082/";
$ch = curl_init();
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_URL, $url );
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result = curl_exec($ch);
if (!preg_match("/cPanel Login/i", $result))
{ // if
$_SESSION['user'] = $_POST['user'];
$_SESSION['authed'] = true;
return true;
}
else // else
{
return false;
}
} // end if
// END FUNCTION TO AUTHORIZE A USER WITH CPANEL LOGIN DETAILS
if (!$_POST)
{ // THIS CAN BE REPLACED WITH YOUR OWN HTML
// ENSURE YOU GIVE THE FORM OBJECTS THE SAME NAMES
echo "<form action=\"\" method=\"post\">\n";
echo "Username : <input type=\"text\" name=\"user\"><br>\n";
echo "Password : <input type=\"password\" name=\"pass\"><br>\n";
echo "<input type=\"submit\" value=\"login\"><br>\n";
echo "</form>";
exit;
}
elseif (auth()) {
header("location: members.php");
exit;
}
else
{
header("location members.php");
exit;
} // end if
?>
and members.php, the page that is protected ....
<?php session_start();
// Make sure the user has permissions to view the page
if (!$_SESSION['authed']) { header("location: login.php"); exit; }
// Logout
if ($_GET['action'] == "logout")
{
session_destroy();
header("location: login.php");
}
?>
<!-- PROTECTED PAGE -->
<a href="?action=logout">Logout</a>
You don't need to do anything at all, the persons username is stored in $_SESSION['user'] passwords are not, as that's insecure, but you can greet by name.
or you want it to use sql ?