Browseri mi ne žele otvorit PHP fileove

john_st · Post edited by Unknown User at 2010-06-04 16:46:01

Imam problem. I to prilično čudan.

Instalirao MAMP na Snow Leopardu, apache radi, mysql radi. Napravim index.php u Texteditu i nikako ga ne mogu otvorit ni u jednom browseru (safari, flock, opera). Idem na Get info, pa open with i ne prihvaća nijedan browser kao aplikaciju koja bi mogla otvorit takav file. Idem na file open i opet isto, zasivljen i "ne otvoriv u browseru".

WTF?!

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Kao prvo bilo bi dobro da iskljucis "Register globals" u php.ini, a to znaci da ako neke podatke saljes preko forme sa post method, onda na stranici na koju ih saljes na mozes pozvati sa $username, vec treba korisiti $_POST['username']. Neznam kako ti to uopce radi jer cini mi se da je ta funkcionalnost ionako ukinuta u PHP 5.

Mozda ti i skripta radi, nisam detaljno proucio, ali koliko vidim password bi trebao u bazi biti encryptan sa md5 metodom, znaci ako ti je password npr. mackorisnik, onda ne moze u bazi biti tako zapisan vec mora biti 3a28d1f326a0ef9110ed9fe260044d98. -> http://www.adamek.biz/md5-generator.php

Provjeri ovo za password prvo, pa onda dalje

Uci PHP, pa kad uspijes napraviti neki app, onda obavezno pogledaj neki framework. Ja preporucam Codeigniter

ficho · Post edited by Unknown User at 1999-11-30 00:00:00

Pa vidis da ima $pass = md5($_POST['password']); dakle kriptira password u md5 prije provjeravanja u bazi, samo je s globalsima bio problem valjda.

netvis · Post edited by Unknown User at 1999-11-30 00:00:00

A otkada to web browseri znaju izvršavati PHP?
PHP se treba izvršiti na web poslužitelju (npr. apache), a kao rezultat se dobije HTML koji su web browseri u stanju prikazati.

ficho · Post edited by Unknown User at 1999-11-30 00:00:00

@john_st: moras ubacit php fileove koje zelis otvorit u root folder MAMPa (nemam pojma koji je to, potrazi malo u dokmentaciji/helpu/di vec) i onda ih iz browsera otvorit preko adrese tipa http://localhost/file.php

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

osjećam se ko dijete iz onog vica kojem mama s dvije ruke daje neki ogromni disk i kaže "evo ti keks"

ecvis17 · Post edited by Unknown User at 1999-11-30 00:00:00

fora thread

Clark Kent · Post edited by Unknown User at 1999-11-30 00:00:00

Najbanalnije: jesi li omogućia php na svom macu?
znači u finder-u cmd+shift+G , upiši /etc/apache2 , otvori httpd.conf sa nekin text editoron (textWrangler npr.) , odskrolaj do 114 linije koda di piše
#LoadModule php5_module libexec/apache2/libphp5.so
i makni ovaj # sa početka tako da dobiješ
LoadModule php5_module libexec/apache2/libphp5.so
Sejvaj to, pitat će te za password, ukucaj password i to je to! Php bi triba sad lokalno radit

Clark Kent · Post edited by Unknown User at 1999-11-30 00:00:00

A moraš startat i apache iz System Preferences/Internet & Network pa Sharing pa omogući Web Sharing. Ako to dvoje napraviš tribalo bi radit sve sa .php ekstenzijon:-D

ficho · Post edited by Unknown User at 1999-11-30 00:00:00

Pa instalirao je covjek MAMP, valjda on sve automatski podesi.

Clark Kent · Post edited by Unknown User at 1999-11-30 00:00:00

Iskreno, nisan ni zna šta je mamp, tek san sad pogleda:-D. Ali ne vidin baš smisao kad osx ima lipo ugrađen apache i php, a mysql se instalira za 2 min. Ja san napravia ovako kako san napisa i radi ko sat. Al sad me vuče da provan taj MAMP, izgleda mi fancy:-D

ecvis17 · Post edited by Unknown User at 1999-11-30 00:00:00

Covjek je instalirao MAMP ... dakle nikakvi terminali mu ne trebaju.
Poanta je da imaš svoj "virtualni server" no nije cijeli komp vserver vec imas direktorij koji sluzi za to. Takodjer se datotekama i šristupa kao na serveru ... dakle nema desni klik >> open with >> tvoj browser ... nego ukuzaj path u browser.
Takodjer u MAMP >> preferences >> Apache >> Unesi path /Users/toj_user/Sites ... i onda ti je to fio root servera i tu bacaj php datoteke.
MAMP >> preferences >> Ports ako nije uneseno ovako unesi za apache port vrijednost 80 a za mySql 3306 ... ili klikni na Set to default ...

Također provjeri da imaš isključen "web sharing" u sharing preferencesima kako bi to sve radilo.

I to je to onda pises u browser http://localhost/index.php + enter i voila
poz

ecvis17 · Post edited by Unknown User at 1999-11-30 00:00:00

"Clark Kent" said:
Al sad me vuče da provan taj MAMP, izgleda mi fancy:-D

A cuj neće ti bit niš fancy samo je još lakše podesiti pokretanje. Meni je ok dashboard widget of MAMPa ... za startanje i gasenje servera.
Osim toga ... same shit

EIDT: Osim možda sto s njim dobijes PhPMyAdmin instaliran?! To nema mac po defaultu.

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Zato MAMP Pro ima dosta zgodnih opcija

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

Kako sam prilično nov u PHPu (mada to jako vješto skrivam

) to sam preuzeo s interneta kod za logiranje korisnika na stranicu.

Imam bazu s tablicom Users u kojoj je smješten korisnik koji smije pristupiti stranici. Tu je njegov username i password. Ako pokušam unijeti krive podatke u login formu uredno me izbaci i vrati ponovno na nju, ali problem je što mi ne prepoznaje pravog korisnika i ne vodi me na welcome.php nego me opet vraća na index.php

Stoga vas molim za pomoć.

index.php izgleda ovako:

&lt;html&gt;
&lt;body&gt;
&lt;h1&gt;Dobar dan!&lt;/h1&gt; &lt;br&gt;
&lt;form action=&quot;login&#46;php&quot; method=&quot;post&quot;&gt;
	Username&#58; &lt;input type=&quot;text&quot; name=&quot;username&quot; size=&quot;20&quot;&gt;
	Password&#58; &lt;input type=&quot;text&quot; name=&quot;password&quot; size=&quot;20&quot;&gt;
	&lt;input type=&quot;submit&quot; value=&quot;Prijava&quot; name=&quot;login&quot;&gt;
&lt;/form&gt;
&lt;/body&gt;
&lt;/html&gt;

login.php izgleda ovako:

&lt;?PHP 
	//check that the user is calling the page from the login form and not accessing it directly 
	//and redirect back to the login form if necessary 
	if (!isset($username) || !isset($password)) 
	{ 
		header( &quot;Location&#58; index&#46;php&quot; ); 
	} 
	//check that the form fields are not empty, and redirect back to the login page if they are 
	elseif (empty($username) || empty($password)) 
	{ 
		header( &quot;Location&#58; index&#46;php&quot; ); 
	} 
	else
	{ 
	
		//convert the field values to simple variables 
		
		//add slashes to the username and md5() the password 
		$user = addslashes($_POST&#91;'username'&#93;); 
		$pass = md5($_POST&#91;'password'&#93;); 
		
		//set the database connection variables 
		
		$dbHost = &quot;localhost&quot;; 
		$dbUser = &quot;dbuser&quot;; 
		$dbPass = &quot;dbpass&quot;; 
		$dbDatabase = &quot;dbname&quot;; 
		
		//connet to the database 
		
		$db = mysql_connect(&quot;$dbHost&quot;, &quot;$dbUser&quot;, &quot;$dbPass&quot;) or die (&quot;Error connecting to database&#46;&quot;); 
		
		mysql_select_db(&quot;$dbDatabase&quot;, $db) or die (&quot;Couldn't select the database&#46;&quot;); 
		
		$result=mysql_query(&quot;select * from Users where username='$user' AND password='$pass'&quot;, $db); 
		
		//check that at least one row was returned 
		
		$rowCheck = mysql_num_rows($result); 
		if($rowCheck &gt; 0){ 
		while($row = mysql_fetch_array($result))
		{ 
		
		  //start the session and register a variable 
		
		  session_start(); 
		  session_register('username'); 
		
		  //we will redirect the user to another page where we will make sure they're logged in 
		  header( &quot;Location&#58; welcome&#46;php&quot; ); 
		
		  } 
	
		} 
	  	else 
	  	{ 
	
		  	//if nothing is returned by the query, unsuccessful login code goes here&#46;&#46;&#46; 
	
			header( &quot;Location&#58; index&#46;php&quot; ); 
		} 
	} 
?&gt;

welcome.php izgleda ovako:

&lt;?php 

	//start the session 
	session_start(); 
	
	//check to make sure the session variable is registered 
	if(session_is_registered('username'))
	{	
		echo &quot;bravo!&quot;;
	}
	else 
	{ 

		//the session variable isn't registered, send them back to the login page 
		header( &quot;Location&#58; index&#46;php&quot; ); 
	} 
?&gt;

&lt;html&gt;
&lt;head&gt;

&lt;/head&gt;

&lt;body&gt;
&lt;h1&gt;Logiran si!!&lt;/h1&gt;
&lt;/body&gt;
&lt;/html&gt;

P.S. ne znam dal da ovo stoji u ovom topicu ili da se stavi u novi, pa prepuštam moderatoru da to odabere

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

Provjerio sam sada u php.ini od oba PHP-a koja su došla s MAMPom i oba su po defaultu imala isključeno "Register globals"

Kao što je Ficho primijetio, šaljem enkriptirano sa md5, međutim, probao sam u bazu staviti i md5 vrijednost i običnu vrijednost pa isključiti md5 enkripciju u login.php ali svejedno isti rezultat. nikako da valjani user dođe do welcome.php

ficho · Post edited by Unknown User at 1999-11-30 00:00:00

Pa promijeni svuda $username u $_POST['username'] i isto tako s passwordom. Bez register_globals ti nece podaci iz forme bit u $ime_varijable nego iskljucivo u $_METODA['ime_varijable'] (metoda moze bit get i post).

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

Promijenio svuda i opet ista pjesma. Evo tih "novih" php fileova

login.php

&lt;?PHP 
   //check that the user is calling the page from the login form and not accessing it directly 
   //and redirect back to the login form if necessary 
   if (!isset($_POST&#91;'username'&#93;) || !isset($_POST&#91;'password'&#93;)) 
   { 
      header( &quot;Location&#58; index&#46;php&quot; ); 
   } 
   //check that the form fields are not empty, and redirect back to the login page if they are 
   elseif (empty($_POST&#91;'username'&#93;) || empty($_POST&#91;'password'&#93;)) 
   { 
      header( &quot;Location&#58; index&#46;php&quot; ); 
   } 
   else
   { 
   
      //convert the field values to simple variables 
      
      //add slashes to the username and md5() the password 
      $user = addslashes($_POST&#91;'username'&#93;); 
      $pass = md5($_POST&#91;'password'&#93;); 
      
      //set the database connection variables 
      
      $dbHost = &quot;localhost&quot;; 
      $dbUser = &quot;dbuser&quot;; 
      $dbPass = &quot;dbpass&quot;; 
      $dbDatabase = &quot;dbname&quot;; 
      
      //connet to the database 
      
      $db = mysql_connect(&quot;$dbHost&quot;, &quot;$dbUser&quot;, &quot;$dbPass&quot;) or die (&quot;Error connecting to database&#46;&quot;); 
      
      mysql_select_db(&quot;$dbDatabase&quot;, $db) or die (&quot;Couldn't select the database&#46;&quot;); 
      
      $result=mysql_query(&quot;select * from Users where username='$user' AND password='$pass'&quot;, $db); 
      
      //check that at least one row was returned 
      
      $rowCheck = mysql_num_rows($result); 
      if($rowCheck &gt; 0){ 
      while($row = mysql_fetch_array($result))
      { 
      
        //start the session and register a variable 
      
        session_start(); 
        session_register($_POST&#91;'username'&#93;); 
      
        //we will redirect the user to another page where we will make sure they're logged in 
        header( &quot;Location&#58; welcome&#46;php&quot; ); 
      
        } 
   
      } 
        else 
        { 
   
           //if nothing is returned by the query, unsuccessful login code goes here&#46;&#46;&#46; 
   
         header( &quot;Location&#58; index&#46;php&quot; ); 
      } 
   } 
?&gt;

welcome.php

&lt;?php 

   //start the session 
   session_start(); 
   
   //check to make sure the session variable is registered 
   if(session_is_registered($_POST&#91;'username'&#93;))
   {   
      echo &quot;bravo!&quot;;
   }
   else 
   { 

      //the session variable isn't registered, send them back to the login page 
      header( &quot;Location&#58; index&#46;php&quot; ); 
   } 
?&gt;

&lt;html&gt;
&lt;head&gt;

&lt;/head&gt;

&lt;body&gt;
&lt;h1&gt;Logiran si!!&lt;/h1&gt;
&lt;/body&gt;
&lt;/html&gt;

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Ubaci ovo u login.php za svaki slucaj:

error_reporting(2047);
ini_set(&quot;display_errors&quot;,1);

Mozda imas neku gresku, nisam sada provjeravao. I da zakomentiraj sve header() pozive, da ne radi redirekciju.
Ako nema greske onda jednostavno ides jednu po jednu varijablu ispisati. Npr. ispod kad postavis $user i $pass:

echo $user, '&lt;br/&gt;';
echo $pass, '&lt;br&gt;';

I probaj rucno usporediti dal ti to odgovara vrijednosti u bazi.

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

Mislim da sam izolirao problem, ali tek sada mi ništa nije jasno.

Dakle imam bazu Baza i tablicu Users u kojoj je samo jedan redak
UID = 1, username = john, password = 5f4dcc3b5aa765d61d8327deb882cf99

(taj md5 je md5 od riječi password

)

E sada, nakon querya sam pokušao ovo:

echo 'abc', $result&#91;'password'&#93;, '&lt;br&gt;';

međutim, ispiše samo abc i opali novi red. dakle, ne nalazi ovaj gore md5 nigdje u tablici, a ručno sam ga preko phpmyadmina ubacio! :evil:

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Napravi ovako:

$query = &quot;select * from Users where username='$user' AND password='$pass'&quot;;
echo $query;

I napisi sto ti se ispise.

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

Ako unesem krivog usera, npr username = 1 i password = 1 tada ispiše ovo:

1
c4ca4238a0b923820dcc509a6f75849b
Resource id #3

Ako unesem pravog usera (john, password) onda ispiše ovo:

john
5f4dcc3b5aa765d61d8327deb882cf99
Resource id #2

s tim da sam promijenio tvoj prijedlog

echo $query;

za

echo $result;

jer mi je ispisivao doslovno sadržaj upita a ne rezultat njegova izvršavanja

evo login.php-a

&lt;?PHP 
   error_reporting(2047);
	ini_set(&quot;display_errors&quot;,1);
   //check that the user is calling the page from the login form and not accessing it directly 
   //and redirect back to the login form if necessary 
   if (!isset($_POST&#91;'username'&#93;) || !isset($_POST&#91;'password'&#93;)) 
   { 
     // header( &quot;Location&#58; index&#46;php&quot; ); 
   } 
   //check that the form fields are not empty, and redirect back to the login page if they are 
   elseif (empty($_POST&#91;'username'&#93;) || empty($_POST&#91;'password'&#93;)) 
   { 
    //  header( &quot;Location&#58; index&#46;php&quot; ); 
   } 
   else
   { 
   
      //convert the field values to simple variables 
      
      //add slashes to the username and md5() the password 
      $user = addslashes($_POST&#91;'username'&#93;); 
      echo $user, '&lt;br/&gt;';

      $pass = md5($_POST&#91;'password'&#93;); 
      echo $pass, '&lt;br&gt;';

      //set the database connection variables 
      
      $dbHost = &quot;localhost&quot;; 
      $dbUser = &quot;root&quot;; 
      $dbPass = &quot;root&quot;; 
      $dbDatabase = &quot;Strukture&quot;; 
      
      //connet to the database 
      
      $db = mysql_connect(&quot;$dbHost&quot;, &quot;$dbUser&quot;, &quot;$dbPass&quot;) or die (&quot;Error connecting to database&#46;&quot;); 
      
      mysql_select_db(&quot;$dbDatabase&quot;, $db) or die (&quot;Couldn't select the database&#46;&quot;); 
      
      $query = &quot;select * from korisnici where username='$user' AND password='$pass'&quot;;
      
      $result=mysql_query($query, $db); 
       
       echo $result;

    
      //check that at least one row was returned 
      
      $rowCheck = mysql_num_rows($result); 
      if($rowCheck &gt; 0){ 
      while($row = mysql_fetch_array($result))
      {   

        //start the session and register a variable 
      
        session_start(); 
        session_register($_POST&#91;'username'&#93;); 
      
        //we will redirect the user to another page where we will make sure they're logged in 
        // header( &quot;Location&#58; welcome&#46;php&quot; ); 
      
        } 
   
      } 
        else 
        { 
   
           //if nothing is returned by the query, unsuccessful login code goes here&#46;&#46;&#46; 
   
       //  header( &quot;Location&#58; index&#46;php&quot; ); 
      } 
   } 
?&gt;

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Pa i htio sam da ispise query, ne rezultat, kad ti rezultat nije ok

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

ahaaaa

nisam te shvatio. evo što ispiše za korisnika 123 sa lozinkom 123

select * from Users where username='123' AND password='202cb962ac59075b964b07152d234b70'

strija · Post edited by Unknown User at 1999-11-30 00:00:00

E pa sad te podatke koje vidis u queryu rucno usporedi s onim sto je u bazi

larna · Post edited by Unknown User at 1999-11-30 00:00:00

Mislim da bi trebao zamijeniti

session_register($_POST&#91;'username'&#93;);

sa

$_SESSION&#91;'username'&#93; = $_POST&#91;'username'&#93;;

Pa poslije u welcome.php checkirati $_SESSION['username'].

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

@strija - provjerio sam, i slaže se kad unesem pravog korisnika, ali svejedno ne radi redirect na welcome.php.

@larna - modificirao sam prema tvojim uputama i nije bilo promjene. međutim, onda sam modificirao u login.php ovako:

$_SESSION&#91;'username'&#93; = $user;

i u welcome.php ovako

if($_SESSION&#91;'username'&#93; = &quot;john&quot;)

i opet ne radi, no ako sam ukucam welcome.php tada mi prolazi i kao logiran sam.

baš me ovo sve frustrira. tako "jednostavna" i banalna stvar mi ne radi a bez toga se ne mogu mrdnit dalje, a ima toga još što trebam napravit!! :cry:

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

uspio sam!! nakon suza i znoja, uspio sam!!

ako vas zanima rješenje, postat ću. nisam htio odmah jer sam dovoljno "zagadio" ovaj topic sa mojim kodovima

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Postaj, bas me zanima gdje je bila greska

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

index.php

&lt;html&gt;
	&lt;body&gt;
		
		&lt;h1&gt;Niste logirani!!!&lt;/h1&gt;
		&lt;form name=&quot;form1&quot; method=&quot;post&quot; action=&quot;login&#46;php&quot;&gt;
			Username&#58; &lt;input name=&quot;myusername&quot; type=&quot;text&quot;&gt;&lt;br&gt;
			Password&#58; &lt;input name=&quot;mypassword&quot; type=&quot;password&quot;&gt;&lt;br&gt;
			&lt;input type=&quot;submit&quot; name=&quot;Submit&quot; value=&quot;Login&quot;&gt;
		&lt;/form&gt;
	&lt;/body&gt;
&lt;/html&gt;

login.php

&lt;?php 
	session_start();
	ob_start();
	$host = &quot;localhost&quot;;
	$username = &quot;root&quot;;
	$password = &quot;root&quot;;
	$db_name = &quot;baza&quot;;
	$db_tbl = &quot;korisnici&quot;;
	
	// spoji se na server i odaberi bazu
	mysql_connect(&quot;$host&quot;, &quot;$username&quot;, &quot;$password&quot;) or die (&quot;ne mogu se spojit na mysql&quot;);
	mysql_select_db(&quot;$db_name&quot;) or die (&quot;ne mogu odabrat bazu&quot;);
	
	// definirajmo username i password korisnika koji se spaja na stranicu
	$myusername = $_POST&#91;'myusername'&#93;;
	$mypassword = $_POST&#91;'mypassword'&#93;;
	
	// zastita od MySQL injekcije
	$myusername = stripslashes($myusername);
	$mypassword = stripslashes($mypassword);
	$myusername = mysql_real_escape_string($myusername);
	$mypassword = mysql_real_escape_string($mypassword);
	
		
	$sql = &quot;SELECT * FROM $db_tbl WHERE username = '$myusername' AND password = '$mypassword'&quot;;
	$result = mysql_query($sql);
	
	// pobrojimo pronadene retke
	$count = mysql_num_rows($result);
	
	// ako se rezultati slazu sa unesenim podacima broj redaka mora biti 1
	if ($count == 1)
	{
		// registrirajmo korisnicke podatke i preusmjerimo na welcome&#46;php
		$_SESSION&#91;'myusername'&#93; = $myusername;
		header(&quot;location&#58;welcome&#46;php&quot;);
	}
	else
	{
		echo &quot;&lt;h1&gt;Pogresni podaci&#46;&#46;&#46;&lt;/h1&gt;&quot;;
		echo &quot;&lt;p&gt;&lt;a href=\&quot;index&#46;php\&quot;&gt;Pokusajte ponovno&#46;&#46;&#46;&lt;/a&gt;&lt;/p&gt;&quot;;
	}
	ob_end_flush();
?&gt;

logout.php

&lt;?php 
	session_start();
	if($_SESSION&#91;'myusername'&#93;) == &quot;john&quot;)	
	{
		session_unset();
		session_destroy();
	}
	
	// šalji opet na logiranje
	header(&quot;location&#58;index&#46;php&quot;);
?&gt;

welcome.php

&lt;?php 

	//start the session 
	session_start(); 
	
	//check to make sure the session variable is registered 
	if($_SESSION&#91;'username'&#93; != &quot;john&quot;)
	{	
		//the session variable isn't registered, send them back to the login page 
		header( &quot;Location&#58; index&#46;php&quot; ); 
	} 
?&gt;
&lt;html&gt;
	&lt;body&gt;
		&lt;h2&gt;Aleluja!&lt;/h2&gt;
		&lt;br&gt;
		&lt;p&gt;za odjebaus klikni &lt;a href=&quot;logout&#46;php&quot;&gt;ovdje&lt;/a&gt;&lt;/p&gt;
	&lt;/body&gt;
&lt;/html&gt;

strija · Post edited by Unknown User at 1999-11-30 00:00:00

Ne vidim bas sto si drugacije napravio, ali ovo definitivno ne bi smjelo ostati

if($_SESSION&#91;'myusername'&#93;) == &quot;john&quot;)

john_st · Post edited by Unknown User at 1999-11-30 00:00:00

par linija koda je drugačije, a jedna od njih je ta da se na početku login.php stavio session_start()

a to sam stavio jer sam ja jedini korisnik koji će koristit. glupo ili? šta da stavim umjesto toga?

strija · Post edited by Unknown User at 1999-11-30 00:00:00

E da, session_start() je onda sigurno bio problem, posto ne mozes citati vrijednosti session varijabli ako ne pokrenes session. Previse koristim frameworkove da sam i zaboravio osnove PHP-a

Za provjeru loggedin je inace najbolje korisiti neki hashed key. Znaci da svaki korisnik u bazi ima npr. nesto ovako:

$user_key = sha1(time());

To onda zapises u bazu pod recimo kolonom user_key. I onda kad se user logira, stavis taj key u session i mozda user id, a ne username. I na svakoj stranici bi trebao provjeriti da li je taj key u sessionu isti onaj u bazi za tog usera s tim id-om.

Zvuci malo komplicirano, ali u stvari je dosta simple.

I ako hoces jos pojacati security dodas i neki salt, pa mozes encryptati cookie, i zapisivati session podatke u bazu umjesto u cookie

A to sve automatski dobijes s neki od postojecih frameworkova.

I preporucio bi ti da odmah pocnes raditi objektno ako se mislis malo ozbiljnije baviti php-om.

pozz

Pozdrav korisniče,

Kategorije

In this Discussion

Top Posters

Članovi (6489)

Tko je online (3)