De PHPhulp kroeg
probleem bij beveiligen pagina
ik heb al vele manieren geprobeerd en topics gelezen , maar niks helpt ...
ik gebruik phpmylogin , maar ik slaag er nog steeds niet in om mijn pagina's te beveiligen...
dit staat bovenaan in de eerste regel van men pagina :
alvast bedankt!
Wat gaat er percies mis
Meer uitleg graag?
verder kan ik ook niet zien wie er ingelogd is ....
alvast bedankt voor de snelle reactie ...
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
<?php
###################################
## PHPMYLOGON: A LOGIN SYSTEM ##
## (c) 2006 Jorik Berkepas ##
## Under the GNU GPL license ##
## [email protected] ##
###################################
// Inlucde this file (safe.php) to let a page only access by members/admins
include_once("config.php");
include_once("lang/lang_".$lang.".php");
include_once("connect.php");
if(isset($_SESSION['user_id'])) {
// Login ok, update last active
$sql = "UPDATE `".$db_tbl."` SET lastactive=NOW() WHERE id='".$_SESSION['user_id']."'";
mysql_query($sql);
}else{
if(isset($_COOKIE['cookie_id'])) {
$sql = "SELECT cookie_pass,state FROM `".$db_tbl."` WHERE id='".$_COOKIE['cookie_id']."'";
$query = mysql_query($sql);
$row = mysql_fetch_object($query);
$dbpass = htmlspecialchars($row->cookie_pass);
$dbstatus = htmlspecialchars($row->state);
if($dbpass == $_COOKIE['cookie_pass']) {
$_SESSION['user_id'] = $_COOKIE['cookie_id'];
$_SESSION['user_status'] = $dbstatus;
}else{
setcookie("cookie_id", "", time() - 3600);
setcookie("cookie_pass", "", time() - 3600);
header("Location: login.php");
}
}else{
header("Location: login.php");
}
}
?>
###################################
## PHPMYLOGON: A LOGIN SYSTEM ##
## (c) 2006 Jorik Berkepas ##
## Under the GNU GPL license ##
## [email protected] ##
###################################
// Inlucde this file (safe.php) to let a page only access by members/admins
include_once("config.php");
include_once("lang/lang_".$lang.".php");
include_once("connect.php");
if(isset($_SESSION['user_id'])) {
// Login ok, update last active
$sql = "UPDATE `".$db_tbl."` SET lastactive=NOW() WHERE id='".$_SESSION['user_id']."'";
mysql_query($sql);
}else{
if(isset($_COOKIE['cookie_id'])) {
$sql = "SELECT cookie_pass,state FROM `".$db_tbl."` WHERE id='".$_COOKIE['cookie_id']."'";
$query = mysql_query($sql);
$row = mysql_fetch_object($query);
$dbpass = htmlspecialchars($row->cookie_pass);
$dbstatus = htmlspecialchars($row->state);
if($dbpass == $_COOKIE['cookie_pass']) {
$_SESSION['user_id'] = $_COOKIE['cookie_id'];
$_SESSION['user_status'] = $dbstatus;
}else{
setcookie("cookie_id", "", time() - 3600);
setcookie("cookie_pass", "", time() - 3600);
header("Location: login.php");
}
}else{
header("Location: login.php");
}
}
?>
Gewijzigd op 01/01/1970 01:00:00 door Yearupie Achternaamloos
'kevin:
op de login pagina bedoel je?
Overal waar je een sessie gebruikt moet dat boven de pagina staan..
waar moet dat dan juist staan?
moet ik anders de code van het inlogscript even geven?
Gewijzigd op 01/01/1970 01:00:00 door kevin deruyck
Gewijzigd op 01/01/1970 01:00:00 door Yearupie Achternaamloos
http://www.treinspottingclubbelgium.be/Host/MSCP/V1.0/leden/info.php
Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /customers/treinspottingclubbelgium.be/treinspottingclubbelgium.be/httpd.www/Host/MSCP/V1.0/leden/index2.php:2) in /customers/treinspottingclubbelgium.be/treinspottingclubbelgium.be/httpd.www/Host/MSCP/V1.0/leden/index2.php on line 3
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /customers/treinspottingclubbelgium.be/treinspottingclubbelgium.be/httpd.www/Host/MSCP/V1.0/leden/index2.php:2) in /customers/treinspottingclubbelgium.be/treinspottingclubbelgium.be/httpd.www/Host/MSCP/V1.0/leden/index2.php on line 3
 
Warning: Cannot modify header information - headers already sent by (output started at /customers/treinspottingclubbelgium.be/treinspottingclubbelgium.be/httpd.www/Host/MSCP/V1.0/leden/index2.php:2) in /customers/treinspottingclubbelgium.be/treinspottingclubbelgium.be/httpd.www/Host/MSCP/V1.0/leden/safe.php on line 35
Zorg ervoor dat er geen witte stukken html voor je session_start staan..
Gewijzigd op 01/01/1970 01:00:00 door Yearupie Achternaamloos
...
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
<?php
session_start();
error_reporting(E_ALL);
###################################
## PHPMYLOGON: A LOGIN SYSTEM ##
## (c) 2006 Jorik Berkepas ##
## Under the GNU GPL license ##
## [email protected] ##
###################################
// Inlucde this file (safe.php) to let a page only access by members/admins
include_once("config.php");
include_once("lang/lang_".$lang.".php");
include_once("connect.php");
if(isset($_SESSION['user_id'])) {
// Login ok, update last active
$sql = "UPDATE `".$db_tbl."` SET lastactive=NOW() WHERE id='".$_SESSION['user_id']."'";
mysql_query($sql);
}else{
if(isset($_COOKIE['cookie_id'])) {
$sql = "SELECT cookie_pass,state FROM `".$db_tbl."` WHERE id='".$_COOKIE['cookie_id']."'";
$query = mysql_query($sql);
$row = mysql_fetch_object($query);
$dbpass = htmlspecialchars($row->cookie_pass);
$dbstatus = htmlspecialchars($row->state);
if($dbpass == $_COOKIE['cookie_pass']) {
$_SESSION['user_id'] = $_COOKIE['cookie_id'];
$_SESSION['user_status'] = $dbstatus;
}else{
setcookie("cookie_id", "", time() - 3600);
setcookie("cookie_pass", "", time() - 3600);
header("Location: login.php");
}
}else{
header("Location: login.php");
}
}
?>
session_start();
error_reporting(E_ALL);
###################################
## PHPMYLOGON: A LOGIN SYSTEM ##
## (c) 2006 Jorik Berkepas ##
## Under the GNU GPL license ##
## [email protected] ##
###################################
// Inlucde this file (safe.php) to let a page only access by members/admins
include_once("config.php");
include_once("lang/lang_".$lang.".php");
include_once("connect.php");
if(isset($_SESSION['user_id'])) {
// Login ok, update last active
$sql = "UPDATE `".$db_tbl."` SET lastactive=NOW() WHERE id='".$_SESSION['user_id']."'";
mysql_query($sql);
}else{
if(isset($_COOKIE['cookie_id'])) {
$sql = "SELECT cookie_pass,state FROM `".$db_tbl."` WHERE id='".$_COOKIE['cookie_id']."'";
$query = mysql_query($sql);
$row = mysql_fetch_object($query);
$dbpass = htmlspecialchars($row->cookie_pass);
$dbstatus = htmlspecialchars($row->state);
if($dbpass == $_COOKIE['cookie_pass']) {
$_SESSION['user_id'] = $_COOKIE['cookie_id'];
$_SESSION['user_status'] = $dbstatus;
}else{
setcookie("cookie_id", "", time() - 3600);
setcookie("cookie_pass", "", time() - 3600);
header("Location: login.php");
}
}else{
header("Location: login.php");
}
}
?>
Gewijzigd op 01/01/1970 01:00:00 door ---- ----